An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated malicious users to escalate privileges via a crafted request.
voipmonitor voipmonitor