This vulnerability involves SQL Injection in FineAdmin V1.0, where the 'field' and 'order' parameters in paginated list endpoints are not properly sanitized. This flaw allows a remote attacker with no privileges or user interaction to execute arbitrary code on the affected system. The CVSS 3.1 base score of 9.8 reflects the critical nature of this vulnerability with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to full compromise of the affected system, including unauthorized data access, data manipulation, and potential system takeover. The vulnerability affects confidentiality, integrity, and availability at a high level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected endpoints and applying any available workarounds recommended by the vendor.