The issue allows remote attackers to execute arbitrary SQL commands via several parameters, including the `picklist name` parameter in the "get picklists" method to "soap/customerportal.php", the `where` parameter in the "get tickets list" method to "soap/customerportal.php", or the `emailaddress` parameter in the "SearchContactsByEmail" method to "soap/vtigerolservice.php". Additionally, remote authenticated users can execute arbitrary SQL commands via the `emailaddress` parameter in the "SearchContactsByEmail" method to "soap/thunderbirdplugin.php".