A critical SQL injection vulnerability in SourceCodester Simple Forum Discussion System 1.0 allows unauthenticated remote attackers to compromise the application database.

This is a SQL injection vulnerability (CWE-89) triggered by manipulating the Username argument within the admin_class.php file. The vulnerability is remotely exploitable by an unauthenticated attacker, as confirmed by the CVSS vector AV:N/AC:L/AT:N/PR:N/UI:N.

Successful exploitation of this flaw allows an attacker to execute arbitrary SQL commands against the backend database. This can lead to unauthorized data exfiltration, modification of administrative credentials, or complete loss of data integrity. Given the CVSS score of 7.3, this represents a high-risk scenario for organizations relying on this software, as the vulnerability is both remotely accessible and requires no authentication.

Immediate Action: As no official patch is currently available, administrators should restrict access to the affected administrative interface via network-level controls or disable the application until a security update is released by the vendor.

Proactive Monitoring: Security teams should monitor web server logs for suspicious activity involving the admin_class.php endpoint, particularly focusing on requests containing SQL syntax patterns in the username field.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection payloads targeting the application login parameters.

Public Exploit Available: Yes — a published proof-of-concept exists as documented in the linked research write-up (https://github.com/bdrfly/cve/issues/1).

The presence of a public proof-of-concept for this unauthenticated SQL injection vulnerability significantly elevates the risk of exploitation. Organizations currently utilizing SourceCodester Simple Forum Discussion System 1.0 must treat this as a high-priority issue and implement the recommended network-level restrictions or WAF protections immediately to prevent unauthorized database access.