This vulnerability in Beardev JoomSport is an improper neutralization of special elements used in SQL commands (CWE-89), resulting in blind SQL injection. It allows remote attackers to inject SQL queries without authentication, potentially exposing sensitive data (high confidentiality impact) and causing partial denial of service (low availability impact). The CVSS 3.1 base score is 9.3, reflecting its critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and scope change. The affected versions include all versions through 5.7.7. No vendor advisory or patch is currently available, and no known exploits in the wild have been reported.

An attacker can exploit this vulnerability remotely without authentication to perform blind SQL injection attacks. This can lead to unauthorized disclosure of sensitive information (high confidentiality impact) and limited disruption of service (low availability impact). Integrity impact is not indicated. The vulnerability affects the confidentiality and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider applying application-level input validation or web application firewall (WAF) rules to detect and block SQL injection attempts targeting JoomSport. Monitor vendor channels for updates and patches.