An unauthenticated SQL injection vulnerability in Inout EasyRooms Ultimate Edition v1.0 allows remote attackers to extract sensitive data or modify database contents.

The application fails to properly sanitize user input in the guests parameter of the search/rentals endpoint. This SQL injection flaw allows an unauthenticated attacker to inject malicious SQL commands directly into the backend database, leading to potential unauthorized data access or manipulation.

The vulnerability carries a CVSS score of 8.2, reflecting a high severity due to the ease of exploitation and the potential for significant data compromise. Successful exploitation could allow an attacker to dump sensitive customer information, bypass authentication mechanisms, or alter reservation records, leading to severe reputational damage and loss of system integrity.

Immediate Action: Upgrade to the latest version of Inout EasyRooms if a patch is provided by Inoutscripts, or contact the vendor for immediate remediation guidance.

Proactive Monitoring: Review web server access logs for anomalous POST requests to the search/rentals or search/searchdetailed endpoints, specifically looking for SQL syntax patterns in the guests, location, or numguest parameters.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection protection rules to inspect and block malicious payloads targeting the vulnerable parameters before they reach the application.

Public Exploit Available: Yes, a functional proof-of-concept exists as documented in Exploit-DB (EDB-ID 46630).

Given the high severity and the availability of public proof-of-concept code, this vulnerability poses a significant risk to any organization running the affected software. Security teams should prioritize patching or implementing robust WAF rules to block malicious SQL injection attempts immediately to prevent potential data breaches.