Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the reports_id (POST) parameter.

Published Apr 16, 2020 · Updated Aug 4, 2024 · Assigned by mitre