This vulnerability in Media Search Enhanced arises from improper neutralization of special elements in SQL commands, enabling SQL Injection attacks. It affects versions up to 0.9.1. The CVSS vector indicates the attack requires network access, low attack complexity, and high privileges, with no user interaction needed. The impact includes a high confidentiality impact and low availability impact, with no integrity impact. No known exploits in the wild or patches have been reported yet.

An attacker with high privileges can exploit this SQL Injection vulnerability to access or disclose sensitive database information, compromising confidentiality. The vulnerability does not impact data integrity but may cause limited availability issues. There are no known active exploits at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, restrict access to the affected application to trusted users with necessary privileges and monitor for suspicious activity related to SQL queries.