SuiteCRM 7.10.7 contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the pare…

SuiteCRM version 7.10.7 contains a SQL injection vulnerability affecting authenticated users. The vulnerability exists in the parentTab parameter of the email module, allowing attackers to manipulate database queries through GET requests. Attackers can exploit this using boolean-based SQL injection techniques to extract sensitive database information. The vulnerability requires authentication but allows for database manipulation and information disclosure. Multiple advisories and exploit code are available publicly for this CVE.