An attacker can inject malicious SQL statements through user-controlled input, allowing unauthorized access to, modification of, or disclosure of database data.
The supplied CVSS vector indicates local access, low privileges, no user interaction, and high attack complexity. The description does not identify the affected application, input field, or authentication boundary.
Successful SQL injection could allow unauthorized access to, modification of, or disclosure of database data. The CVSS vector also indicates high impact on confidentiality, integrity, and availability.
The available information does not state whether the vulnerable SQL input is enabled or reachable in a default configuration.