This vulnerability involves improper neutralization of special elements in SQL commands within eleopard Behance Portfolio Manager, enabling Blind SQL Injection attacks. It affects versions up to 1.7.5 and requires high privileges to exploit. The CVSS score is 7.6, indicating a high severity with network attack vector, low attack complexity, no user interaction, and a scope change. The impact includes high confidentiality loss and low availability impact, with no integrity impact.

Successful exploitation can lead to unauthorized disclosure of sensitive information (high confidentiality impact) and limited disruption of service (low availability impact). Integrity of data is not impacted. The attack requires high privileges, which limits the attack surface somewhat.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to the affected versions and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the affected application to untrusted networks if possible.