CVE-2020-13592

An exploitable SQL injection vulnerability exists in "global_lists/choices" page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability, this can be done either with administrator credentials or through cross-site request forgery.

• CWE-89
• CWE-89

• https://talosintelligence.com/vulnerability_reports/TALOS-2020-1201Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2020-1201Exploit, Third Party Advisory

Published

Apr 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-13587An exploitable SQL injection vulnerability exists in the "fo…8.8
• CVE-2020-13588An exploitable SQL injection vulnerability exists in the ‘en…8.8
• CVE-2020-13589An exploitable SQL injection vulnerability exists in the ‘en…8.8
• CVE-2020-1359An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-13590Multiple exploitable SQL injection vulnerabilities exist in …7.2
• CVE-2020-13591An exploitable SQL injection vulnerability exists in the "ac…8.8
• CVE-2020-13593The Bluetooth Low Energy Secure Manager Protocol (SMP) imple…8.8
• CVE-2020-13594The Bluetooth Low Energy (BLE) controller implementation in …6.5
• CVE-2020-13595The Bluetooth Low Energy (BLE) controller implementation in …6.5
• CVE-2020-13596An issue was discovered in Django 2.2 before 2.2.13 and 3.0 …6.1
• CVE-2020-13597Clusters using Calico (version 3.14.0 and below), Calico Ent…3.5
• CVE-2020-13598FS: Buffer Overflow when enabling Long File Names in FAT_FS …7.8