Improper neutralization of special elements used in an SQL command allows an attacker to inject arbitrary SQL queries. This can result in unauthorized reading, modification, or deletion of database records, potentially exposing sensitive customer information and disrupting business operations. The weakness is a classic SQL injection flaw, classified as CWE-89.

Akilli Commerce Software Technologies Ltd. Co. provides an E‑Commerce Website that is vulnerable in all releases prior to version 4.5.001. Only the indicated product and these versions are affected; it is not confirmed whether later releases contain a fix.

The CVSS score of 9.8 indicates a high severity level, and the EPSS score is not available, which neither confirms nor denies current exploitation prevalence. Based on the description, it is inferred that the vulnerability could be exploited remotely via the web interface, requiring an attacker to supply malicious input to any unauthenticated or authenticated endpoint that accepts user data. With no recorded KEV listing, the risk remains high but not yet confirmed in real‑world exploitation scenarios.