Description
Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the entities_id parameter.
Remediation
References
Related Vulnerabilities
WordPress Plugin The Sorter SQL Injection (1.0)
WordPress Plugin FAQs Manager SQL Injection (1.0)
WordPress Plugin Influencer Marketing & Press Release System Cross-Site Scripting (2.2)
PHP Uncontrolled Resource Consumption Vulnerability (CVE-2015-9253)
WordPress Plugin User Role by BestWebSoft Cross-Site Scripting (1.5.1)