Log in Start free

Rukovoditel

Products

ProductCVEsExploitedLatest
Rukovoditel3–Dec 17, 2025
Project Management App1–Apr 18, 2022
Rukovoditel CRM1–Apr 11, 2026

Exploited and recent CVEs

  • CVE-2026-31845 Critical 9.3 Rukovoditel CRM Reflected XSS via zd_echo Parameter in Zadarma Telephony API Endpoint 0.4%
  • CVE-2023-53913 High 8.8 Rukovoditel 3.3.1 CSV Injection via User Account Export 0.7%
  • CVE-2023-53898 Medium 5.4 Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting via Configuration 0.2%
  • CVE-2023-53897 Medium 5.4 Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting via Comments 0.2%
  • CVE-2020-13590 Medium 5.4 Multiple exploitable SQL injection vulnerabilities exist in the 'entities/fields' page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An a 0.9%