This vulnerability in odihost Easy Gallery (<= 1.4) is due to improper neutralization of special elements used in SQL commands, leading to SQL Injection. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and a scope change with high confidentiality impact and low availability impact. No official patch or vendor advisory is currently available, and no known exploits are reported in the wild.

Successful exploitation could allow an attacker to access sensitive data (high confidentiality impact) and cause a limited denial of service (low availability impact). Integrity impact is not indicated. The vulnerability can be exploited remotely with low complexity and requires only low privileges, increasing the risk to affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected application and monitor for unusual activity related to SQL queries. Avoid exposing the vulnerable version to untrusted networks where possible.