This vulnerability in Amelia (up to version 2.4.2) involves improper neutralization of special elements in SQL commands, enabling Blind SQL Injection attacks. The CVSS 3.1 score is 9.3 (critical), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and a scope change with high confidentiality impact and low availability impact. No vendor advisory or patch information is available at this time.

An attacker can exploit this vulnerability remotely without authentication to perform Blind SQL Injection, potentially exposing sensitive data (high confidentiality impact) and causing partial denial of service (low availability impact). Integrity impact is not indicated. This could lead to unauthorized data disclosure from the backend database.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider applying web application firewalls or other SQL injection detection/prevention controls to mitigate exploitation risk.