This vulnerability (CVE-2025-48137) in proxymis Interview versions up to 1.01 allows SQL Injection due to improper neutralization of special elements used in SQL commands. The CVSS 3.1 score is 8.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and a scope change. The impact is high confidentiality loss and low availability impact. No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation could allow an attacker with low privileges to perform SQL Injection attacks, potentially leading to unauthorized disclosure of sensitive data (high confidentiality impact) and limited disruption of service (low availability impact). Integrity impact is not indicated. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider applying input validation and parameterized queries as temporary mitigations if possible. Monitor vendor communications for updates on patches or official mitigations.