This vulnerability in Contest Gallery involves improper neutralization of special elements in SQL commands, leading to SQL Injection. The CVSS score is 7.6, indicating high severity, with network attack vector, low attack complexity, requiring high privileges, no user interaction, and a scope change. The impact includes high confidentiality impact and low availability impact, with no integrity impact. The affected versions include all versions up to 25.1.0. No patch or remediation information is provided in the available data.

An attacker with high privileges could exploit this SQL Injection vulnerability to access or disclose sensitive information from the database (high confidentiality impact). The vulnerability does not impact data integrity but may cause limited availability issues. No known exploits have been reported, so active exploitation is not confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected software to trusted users only and monitor for unusual database activity. Avoid exposing the affected versions to untrusted networks.