This vulnerability involves improper neutralization of special elements in SQL commands within the robfelty Collapsing Archives software, enabling Blind SQL Injection attacks. It affects all versions up to 3.0.7. The CVSS 3.1 base score is 8.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, scope change, high confidentiality impact, no integrity impact, and low availability impact. No patch or vendor advisory is provided, and the product is not a cloud service.

Successful exploitation can lead to unauthorized disclosure of sensitive information (high confidentiality impact) due to Blind SQL Injection. Integrity is not impacted, and availability impact is low. The vulnerability requires low privileges but no user interaction, and the attack can be performed remotely over the network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to the vulnerable application and monitor for suspicious activity related to SQL injection attempts.