critical9.8
CVE-2020-11812
Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the filters[0][value] or filters[1][value] parameter.
Impact
Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the filters[0][value] or filters[1][value] parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rukovoditel | Rukovoditel | Version 2.5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://fatihhcelik.blogspot.com/2020/01/rukovoditel-sql-injection-filters0value.html
- https://fatihhcelik.blogspot.com/2020/01/rukovoditel-sql-injection-filters1value.html
- https://fatihhcelik.blogspot.com/2020/01/rukovoditel-sql-injection-filters0value.html
- https://fatihhcelik.blogspot.com/2020/01/rukovoditel-sql-injection-filters1value.html