This vulnerability involves improper neutralization of special elements in SQL commands within the Neoforum product by saeros1984, enabling blind SQL injection. The affected versions include all releases up to version 1.0. The CVSS 3.1 base score is 7.6, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, scope changed, high confidentiality impact, no integrity impact, and low availability impact.

Successful exploitation could allow an attacker with high privileges to extract sensitive information from the database without directly modifying data or causing significant denial of service. The confidentiality impact is high, while integrity impact is none and availability impact is low.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are available at this time. Until a patch is released, restrict access to high-privilege accounts and monitor for unusual database queries related to SQL injection attempts.