This vulnerability in delphiknight Geo to Lat (versions <= 1.0.19) involves improper neutralization of special elements in SQL commands, leading to Blind SQL Injection. An attacker with low privileges and network access can exploit this to extract confidential information from the database without affecting data integrity but potentially causing limited denial of service. The CVSS 3.1 vector indicates the attack requires no user interaction and has a high confidentiality impact. No vendor advisory or patch information is provided, and the product is not a cloud service.

Successful exploitation can lead to unauthorized disclosure of sensitive data (high confidentiality impact) and limited denial of service (low availability impact). There is no impact on data integrity. The vulnerability requires an attacker to have low privileges and network access but no user interaction. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected application and limit privileges of users to reduce exploitation risk.