This vulnerability involves improper neutralization of special elements used in SQL commands within Daisycon Daisycon prijsvergelijkers, allowing SQL Injection attacks. The affected versions include all releases up to and including 4.8.4. The CVSS score is 8.5, indicating a high severity with network attack vector, low attack complexity, requiring low privileges, no user interaction, and a scope change. The impact includes high confidentiality loss and low availability impact. No official patch or remediation information is provided in the available data.

Successful exploitation could allow an attacker to execute unauthorized SQL commands, potentially leading to unauthorized data disclosure (high confidentiality impact) and partial denial of service (low availability impact). Integrity impact is not indicated. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting database permissions and monitoring for suspicious activity related to SQL injection attempts. Avoid exposing vulnerable versions to untrusted networks where possible.