A critical SQL injection vulnerability in LabCollector 5.423 allows unauthenticated remote attackers to extract sensitive database contents, posing a severe risk to laboratory data integrity.

The application fails to properly sanitize user input in the login parameter of login.php and the user_name parameter of retrieve_password.php. An unauthenticated attacker can exploit these flaws by submitting crafted SQL payloads via POST requests to execute arbitrary database queries.

Successful exploitation of this vulnerability allows unauthorized access to the underlying database, potentially exposing sensitive research data, user credentials, and proprietary laboratory information. Given the CVSS score of 8.2, this represents a high-severity risk that could lead to significant data breaches and compromise of the laboratory management system.

Immediate Action: As no specific patch version is provided in the available data, administrators should contact the vendor directly for security updates or patches addressing these specific SQL injection flaws. If an update is unavailable, restrict network access to the affected web interface to trusted internal segments only.

Proactive Monitoring: Review web server access logs for anomalous POST requests to login.php and retrieve_password.php, specifically searching for SQL syntax characters or common injection patterns. Monitor database query logs for unusual activity originating from the web application service account.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection attempts targeting the identified vulnerable parameters.

Public Exploit Available: Yes, a proof of concept and technical write up are available via ExploitDB (EDB-ID 47460).

The presence of a public proof of concept combined with the lack of a clear patch path necessitates immediate defensive action. Organizations running LabCollector 5.423 must prioritize network segmentation and the implementation of WAF rules to mitigate this risk until the vendor provides a formal security update.