This vulnerability in Nabz Image Gallery (<= v1.00) allows SQL Injection due to improper sanitization of input used in SQL commands. An attacker can exploit this flaw remotely without authentication or user interaction, potentially compromising the confidentiality of the database. The CVSS 3.1 score of 9.3 reflects critical severity with network attack vector and low attack complexity. No patch or mitigation details are currently provided.

Successful exploitation could lead to unauthorized disclosure of sensitive data from the database (confidentiality impact is high). Integrity impact is not indicated, and availability impact is low. The vulnerability can be exploited remotely without privileges or user interaction, increasing the risk of compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected application and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable application to untrusted networks if possible.