CVE-2017-1000120: Improper Neutralization of Special Elements used in an SQL Command

ERPNextFrappe Version = 7.1.27 SQL injection vulnerability in frappe.share.getusers allows remote authenticated users to execute arbitrary SQL commands via the fields parameter...