Vendor
An authenticated remote attacker can exploit a SQL injection vulnerability in SuiteCRM to potentially gain unauthorized database access or manipulate backend data.