This vulnerability in kareemsultan Social Links (versions <= 1.2) involves improper neutralization of special elements in SQL commands, leading to SQL Injection. The vulnerability can be exploited remotely over the network with low attack complexity but requires high privileges. Successful exploitation could result in command line execution, impacting confidentiality and availability with no impact on integrity as per the CVSS vector. No patch or official remediation guidance is currently provided by the vendor.

The vulnerability allows an attacker with high privileges to execute commands via SQL Injection, potentially compromising confidentiality and causing partial availability loss. There are no reports of active exploitation. The impact is significant given the ability to execute commands through the database interface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application to trusted users only and monitor for suspicious activity related to SQL commands. Avoid exposing the vulnerable version to untrusted networks.