This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database.