The 07Fly suite of products is vulnerable to unauthenticated remote SQL injection, which poses a significant risk of unauthorized database access and potential system compromise.

This vulnerability is a SQL injection flaw located in the /index.php/Login/login endpoint. An unauthenticated attacker can manipulate the Username parameter to execute unauthorized SQL queries against the backend database.

Successful exploitation allows an attacker to bypass authentication, extract sensitive information, or potentially modify database content. Given the CVSS score of 7.3, this high-severity vulnerability represents a substantial risk to data confidentiality and integrity, particularly if the database contains administrative credentials or customer information.

Immediate Action: Since no official patch is currently available, administrators should restrict access to the login portal via network segmentation or IP allowlisting until the vendor provides a security update.

Proactive Monitoring: Review web server access logs for unusual patterns in the Username field, specifically looking for SQL syntax characters such as single quotes, semicolons, or comments.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection payloads targeted at the /index.php/Login/login endpoint.

Public Exploit Available: Yes, as documented in the linked GitHub repository.

Due to the lack of a vendor-provided patch and the public availability of an exploit, this vulnerability must be treated with high urgency. Organizations utilizing 07Fly products should prioritize implementing robust WAF filtering and strict perimeter access controls immediately to prevent unauthorized exploitation of the database.