This vulnerability involves SQL Injection (CWE-89) in Lost and Found Information System 1.0. An attacker can remotely exploit the 'id' parameter in the admin categories view page to escalate privileges. The CVSS 3.1 vector indicates the attack requires network access with low attack complexity, no user interaction, and privileges required are low. Successful exploitation results in high impact on confidentiality, integrity, and availability of the system.

Exploitation of this vulnerability can lead to unauthorized privilege escalation, allowing attackers to access or manipulate sensitive data and potentially disrupt system availability. The high CVSS score reflects the critical nature of the impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround is provided, it is recommended to monitor the vendor's security advisories for updates. Until a fix is available, restrict access to the affected admin interface and validate or sanitize input parameters to mitigate exploitation risk.