CVE-2022-43168

Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reportsid parameter...

CVE-2022-43168

CVE-2022-43168 affects Rukovoditel v3.2.1, with a SQL injection vulnerability exploitable via the reports_id parameter. The issue is confirmed in multiple feeds as a SQLi in Rukovoditel 3.2.1; CVSS v3.1 scores indicate a critical impact (base score 9.8) with network attack vector, no privileges r...