This vulnerability (CVE-2024-1100) in DIGIKENT GIS arises from improper neutralization of special elements used in SQL commands, classified as CWE-89 (SQL Injection). It affects versions through 2.23.5 and allows unauthenticated remote attackers to execute arbitrary SQL commands, potentially compromising the database's confidentiality, integrity, and availability. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and high impacts on all security properties. No vendor patch or official remediation level has been published yet.

Successful exploitation of this SQL Injection vulnerability can lead to unauthorized data access, data modification, or deletion within the DIGIKENT GIS database. It may also allow attackers to execute arbitrary SQL commands, potentially leading to full system compromise or disruption of service. The CVSS score of 10.0 reflects the critical nature and ease of exploitation without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing application-layer input validation and web application firewalls to detect and block SQL injection attempts. Monitor vendor communications closely for updates on patches or official mitigations.