{"vulnerability": "cve-2023-38891", "sightings": [{"uuid": "b30d59b1-11b0-4862-b64a-b38087758ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38891", "type": "seen", "source": "https://t.me/cibsecurity/70581", "content": "\u203c CVE-2023-38891 \u203c\n\nSQL injection vulnerability in Vtiger CRM v.7.5.0 allows a remote authenticated attacker to escalate privileges via the getQueryColumnsList function in ReportRun.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-15T02:24:47.000000Z"}, {"uuid": "e57004c6-6e51-4835-aac3-ddb935e59e4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-38891", "type": "seen", "source": "Telegram/ig7K5wALKnw7tbTFiMmZIJAWkE7HJFNiMnvDDeQWUrdrGe4", "content": "", "creation_timestamp": "2026-09-22T23:00:22.000000Z"}, {"uuid": "477042a1-a5c4-46cf-b87d-a451ffdbf19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-38891", "type": "published-proof-of-concept", "source": "Telegram/ig7K5wALKnw7tbTFiMmZIJAWkE7HJFNiMnvDDeQWUrdrGe4", "content": "", "creation_timestamp": "2026-09-22T23:00:22.000000Z"}]}