Kubozz/rukovoditel-3.2.1

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-43288 ↗	Nov 14, 2022Monday, 14 November 2022, 15:16	8.8 HIGH	—
Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the order_by parameter at /rukovoditel/index.php?module=logs/view&type=php.
CVE-2022-43185 ↗	Oct 19, 2022Wednesday, 19 October 2022, 14:15	5.4 MEDIUM	—
A stored cross-site scripting (XSS) vulnerability in the Configuration/Holidays module of Rukovoditel v3.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter.