CVE-2026-13150: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF CWE-918 in the PDF generation endpoint GET /api/reports/id/pdf backend/main.py in ccyl13 Pentestify 1.0.0 and lower allows remote attackers to make the server issue requests to arbitrary internal or external URLs, including cloud metadata services, and return the...

CVE-2022-43168

Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reportsid parameter...

SQL Injection Vulnerability Guide

Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software has project management, customer relationship management and other functions. A security vulnerability exists in Rukovoditel version 3.2.1, which stems from the reportsid parameter...

PT-2022-26785 · Unknown · Rukovoditel

Name of the Vulnerable Software and Affected Versions: Rukovoditel version 3.2.1 Description: A SQL injection issue was discovered, which can be exploited via the reports id parameter. Recommendations: For Rukovoditel version 3.2.1, consider restricting access to the reports id parameter until a...

CVE-2020-11816

Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the reportsid POST parameter...

PT-2020-12865

Name of the Vulnerable Software and Affected Versions Rukovoditel version 2.5.2 Description The issue arises from improper handling of the reports id parameter in POST requests, leading to a SQL injection vulnerability. Recommendations For Rukovoditel version 2.5.2, avoid using the reports id...