An unauthenticated SQL injection vulnerability in Inout EasyRooms Ultimate Edition v1.0 allows remote attackers to extract sensitive database information or modify backend content.

The application fails to properly sanitize user-supplied input in the location, guests, numguest, and property1 parameters. An unauthenticated attacker can exploit this flaw by sending malicious SQL payloads to the search/searchdetailed or search/rentals endpoints to interact directly with the underlying database.

The ability to execute arbitrary SQL commands poses a severe risk to data confidentiality and integrity. An attacker could bypass authentication, exfiltrate user credentials or private booking information, and potentially modify or delete database records. With a CVSS score of 8.2, this vulnerability represents a high-severity threat that could lead to full compromise of the application data layer.

Immediate Action: Upgrade to the latest version of Inout EasyRooms if a patch is available, or contact Inoutscripts support to obtain a security hotfix for the identified SQL injection flaws.

Proactive Monitoring: Monitor web server access logs for anomalous POST requests to the search/searchdetailed and search/rentals endpoints, specifically looking for SQL syntax patterns or unexpected character encoding.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns, such as the use of UNION SELECT statements or tautology-based payloads, targeting the specified input parameters.

Public Exploit Available: Yes — a published proof-of-concept exists as documented in the Exploit-DB entry 46630.

Given the availability of public proof-of-concept code and the ease of exploitation, organizations running Inout EasyRooms Ultimate Edition v1.0 must prioritize remediation. If an official patch cannot be applied immediately, the application should be placed behind a robust WAF or restricted from public access until the SQL injection vulnerability is fully mitigated.