EIP-2026-111821

This is a writeup describing a SQL injection vulnerability in Rukovoditel Project Management CRM 2.4.1. The vulnerability requires authentication and can be exploited via the 'lists_id' parameter in a GET request.