CVE-2022-43288: Rukovoditel

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the order_by parameter at /rukovoditel/index.php?module=logs/view&type=php.

Affected products

• Rukovoditel Rukovoditel: version 3.2.1 only

Published 2022-11-14. Last modified 2026-06-17.