A critical SQL injection vulnerability in ResourceSpace 8.6 allows unauthenticated attackers to remotely extract sensitive database contents, posing a severe risk of data compromise.

The application is susceptible to an unauthenticated SQL injection flaw within the watched_searches.php endpoint. By sending crafted GET requests containing malicious SQL payloads to the ref parameter, an attacker can bypass authentication to execute arbitrary queries against the backend database.

Successful exploitation of this vulnerability permits unauthorized access to the underlying database, which may contain sensitive digital assets, user credentials, and configuration data. Given the CVSS score of 8.2, this vulnerability represents a high-severity risk that could lead to full database compromise, data exfiltration, and potential loss of intellectual property or customer information.

Immediate Action: Upgrade ResourceSpace to the latest stable version provided by Montala, as this specific version is confirmed vulnerable.

Proactive Monitoring: Review web access logs for suspicious requests directed at the watched_searches.php endpoint, particularly those containing SQL syntax or unusual characters in the ref parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting GET parameters.

Public Exploit Available: Yes, a published proof-of-concept exists and is attributed to the Exploit-DB entry 46308.

This vulnerability presents a clear and present danger to the integrity and confidentiality of the ResourceSpace environment. Administrators must prioritize the application of vendor-provided security patches immediately. Given that the attack vector is unauthenticated and requires no user interaction, delay in remediation significantly increases the likelihood of a successful data breach.