Crocoblock JetEngine up to version 3.9.0.1 contains an SQL Injection vulnerability due to improper neutralization of special elements in SQL commands. This flaw allows an attacker with low privileges and no user interaction to cause a partial denial of service and potentially disclose sensitive information. The vulnerability has a high severity score of 8.5 and affects versions through 3.9.0.1.