This vulnerability in quantumcloud Simple Business Directory Pro (up to version 15.9.4) involves improper neutralization of special elements in SQL commands, leading to SQL Injection. The issue allows remote attackers to execute crafted SQL queries without authentication, potentially compromising confidentiality and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, with high impact on confidentiality and low impact on availability. No vendor advisory or patch information is currently available.

Successful exploitation can lead to unauthorized disclosure of sensitive information from the database (confidentiality impact is high) and may cause partial denial of service (availability impact is low). Integrity impact is not indicated. The vulnerability is remotely exploitable without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying any available workarounds from the vendor or restrict access to the affected application to trusted networks. Monitor vendor channels for updates.