CVE-2019-7541

Description

References

• packetstormsecurity.com/files/151657/Rukovoditel-Project-Management-CRM-2.4.1-Cross-Site-Scripting.html · Exploit
• blog.rukovoditel.net/releases · Release Notes
• exploit-db.com/exploits/46366 · Exploit

rukovoditel의 다른 취약점

• CVE-2023-53913높음 8.8Rukovoditel 3.3.1 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into the firstname fie…
• CVE-2023-53898보통 5.4Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts. Att…
• CVE-2023-53897보통 5.4Rukovoditel 3.4.1 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scrip…
• CVE-2024-34469높음 7.1Rukovoditel before 3.5.3 allows XSS via user_photo to index.php?module=users/registration&action=save.
• CVE-2024-34468보통 6.1Rukovoditel before 3.5.3 allows XSS via user_photo to My Page.