CVE-2023-38891

SQL injection vulnerability in Vtiger CRM v.7.5.0 allows a remote authenticated attacker to escalate privileges via the getQueryColumnsList function in ReportRun.php...

CVE-2023-38891

SQL injection vulnerability in Vtiger CRM v.7.5.0 allows a remote authenticated attacker to escalate privileges via the getQueryColumnsList function in ReportRun.php...

CVE-2023-38891

SQL injection vulnerability in Vtiger CRM v.7.5.0 allows a remote authenticated attacker to escalate privileges via the getQueryColumnsList function in ReportRun.php...

CVE-2023-38891

CVE-2023-38891 affects Vtiger CRM v7.5.0 in the Reports module: insufficient validation in ReportRun.php (getQueryColumnsList) enables a remote-authenticated user to escalate privileges via crafted selected_fields, with evidence of exploitation in VTiger’s Reports/ReportRun.php checks and a confi...