Vtiger CRM 5.4.0 (index.php, onlyforuser param) - SQL Injection

No description provided by source...