A critical SQL injection vulnerability in Inout EasyRooms Ultimate Edition allows unauthenticated attackers to compromise sensitive database information.

The application is susceptible to SQL injection (CWE-89) because it fails to properly sanitize user-supplied input in the search/searchdetailed endpoint. An unauthenticated attacker can inject malicious SQL commands into the property1 parameter through POST requests to extract data or modify database records.

The ability for an unauthenticated attacker to inject arbitrary SQL queries poses a severe risk to data confidentiality and integrity. Successful exploitation could lead to unauthorized access to sensitive user information, administrative credentials, or full database exposure. Given the CVSS score of 8.2, this vulnerability is classified as High severity and represents a significant risk to the availability and security of the hosting environment.

Immediate Action: As no official patch is currently available, administrators should restrict access to the affected search endpoints via network-level controls or disable the vulnerable search functionality until a vendor update is released.

Proactive Monitoring: Security teams should review web server access logs for anomalous POST requests to the search/searchdetailed endpoint, specifically looking for SQL keywords or unusual character strings.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns, such as UNION SELECT or sleep commands, directed at the application.

Public Exploit Available: Yes, a published PoC exists (attributed to Exploit-DB entry 46630).

Due to the public availability of exploit code and the lack of a vendor-provided patch, this vulnerability presents a high risk to any organization running the affected software. Administrators should prioritize isolating the vulnerable application from public networks or implementing strict WAF filtering to mitigate the risk of automated exploitation attempts.