An unauthenticated SQL injection vulnerability in Campcodes Online Learning Management System 1.0 allows remote attackers to compromise the database.

This vulnerability is a SQL injection flaw (CWE-89) triggered by improper input validation of the firstname parameter within the /admin/edit_user.php file. The attack vector is remote, and the vulnerability can be exploited by an unauthenticated attacker.

The ability to perform remote SQL injection poses a significant risk to the confidentiality and integrity of the learning management system, as it allows attackers to execute arbitrary database queries. Given the CVSS score of 7.3, this represents a high-severity risk that could lead to unauthorized data exfiltration or potential administrative account takeover. Organizations relying on this system for sensitive user data face substantial reputational and operational risks if the database is compromised.

Immediate Action: Since a patch is currently unknown, administrators should restrict access to the /admin/edit_user.php endpoint using network-level controls or by disabling the affected module if it is not business-critical.

Proactive Monitoring: Monitor server access logs for anomalous HTTP requests targeting the /admin/edit_user.php file, specifically looking for SQL syntax patterns in the firstname parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection payloads to mitigate the risk until an official vendor update is released.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the security researcher's write-up at the provided GitHub reference.

This vulnerability presents a high risk due to the availability of a public proof-of-concept and the lack of authentication required to execute the attack. Organizations should prioritize isolating the affected system and implementing WAF protections immediately. Continuous monitoring for indicators of compromise is essential until the vendor provides a formal security patch.