This vulnerability in TeconceTheme Allmart (allmart-core) is due to improper neutralization of special elements in SQL commands, enabling Blind SQL Injection attacks. An attacker can exploit this flaw remotely without authentication, resulting in high confidentiality impact by potentially extracting sensitive data from the database. The integrity impact is not indicated, and availability impact is low. The affected versions include all releases up to 1.1. There is no vendor advisory or patch information available at this time.

The vulnerability allows remote unauthenticated attackers to conduct Blind SQL Injection attacks, which can lead to unauthorized disclosure of sensitive information (high confidentiality impact). The integrity of data is not affected, and availability impact is low. Exploitation in the wild is not currently known.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying any recommended workarounds from the vendor or restrict access to vulnerable components where possible.