4 matches found
CVE-2023-38891
SQL injection vulnerability in Vtiger CRM v.7.5.0 allows a remote authenticated attacker to escalate privileges via the getQueryColumnsList function in ReportRun.php...
8.8CVSS5.8AI score0.00946EPSS
SaveExploits0References3
CVE-2023-38891
SQL injection vulnerability in Vtiger CRM v.7.5.0 allows a remote authenticated attacker to escalate privileges via the getQueryColumnsList function in ReportRun.php...
8.8CVSS5.9AI score0.00946EPSS
SaveExploits0References2
CVE-2023-38891
CVE-2023-38891 affects Vtiger CRM v7.5.0 in the Reports module: insufficient validation in ReportRun.php (getQueryColumnsList) enables a remote-authenticated user to escalate privileges via crafted selected_fields, with evidence of exploitation in VTiger’s Reports/ReportRun.php checks and a confi...
8.8CVSS8.7AI score0.00946EPSS
SaveExploits0References2Affected Software1
20