This vulnerability arises in the V2Board application in the Admin UserController where the 'sort' parameter is used unsafely in a database query's ORDER BY clause. An authenticated admin user can manipulate the 'sort' parameter to order users by any database column, including sensitive ones like password and remember_token. This lack of input validation leads to an SQL Injection vulnerability that can disclose sensitive information by analyzing the ordering results. The CVSS 3.1 score is 4.9, reflecting a medium severity with high confidentiality impact but no integrity or availability impact. No official fix or patch has been documented, and no known exploits are reported in the wild.

An authenticated administrator can exploit this vulnerability to perform SQL Injection via the ORDER BY clause, potentially disclosing sensitive user data such as passwords and authentication tokens. The impact is limited to information disclosure without affecting data integrity or availability. This could lead to unauthorized access to sensitive information stored in the database.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative access to trusted personnel only and monitor for unusual database query patterns related to user sorting. Avoid using unvalidated user input in database queries. Implement input validation or parameterized queries for the 'sort' parameter to prevent injection.