CVE-2024-51619 describes an improper neutralization of special elements in SQL commands (SQL Injection) in the market360 Market 360 Viewer product. This vulnerability allows blind SQL injection attacks, which can be exploited remotely with low attack complexity and no user interaction required. The CVSS score is 8.5, indicating a high severity with network attack vector, low attack complexity, privileges required, no user interaction, scope changed, high confidentiality impact, no integrity impact, and low availability impact. The affected versions include all versions up to 1.01. No patch or remediation details are provided in the available data.

An attacker with low privileges can exploit this vulnerability remotely to perform blind SQL injection, potentially exposing sensitive data (high confidentiality impact). The vulnerability does not impact data integrity but may cause limited availability issues. No known exploits are reported in the wild yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected Market 360 Viewer installations and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable application to untrusted networks if possible.