An unauthenticated SQL injection vulnerability in the code-projects Online Bidding System 1.0 allows remote attackers to compromise database integrity and potentially access sensitive information.

The application is vulnerable to SQL injection (CWE-89) via the ID parameter in the /administrator/weweee.php file. This flaw is remotely exploitable by an unauthenticated attacker, allowing for unauthorized interaction with the underlying database.

Successful exploitation of this vulnerability poses a significant risk to the confidentiality and integrity of the application data. With a CVSS score of 7.3, the vulnerability is classified as High severity, as it allows attackers to execute arbitrary SQL commands. This could lead to unauthorized data exfiltration, modification of bidding records, or complete compromise of the backend database, resulting in potential service disruption and loss of user trust.

Immediate Action: Since no official patch is currently available, administrators should restrict access to the /administrator directory using network-level controls or by disabling the vulnerable component until a fix is released.

Proactive Monitoring: Security teams should monitor web server logs for suspicious HTTP requests targeting the /administrator/weweee.php endpoint, specifically looking for SQL syntax patterns in the ID parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with custom rules designed to detect and block SQL injection attempts directed at the identified vulnerable endpoint.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the technical write-up provided by the researcher at the referenced GitHub repository.

Given the availability of a public proof-of-concept and the ease of remote exploitation, this vulnerability presents a serious risk to any organization running the Online Bidding System. Organizations should prioritize isolating the affected component immediately and implement strict WAF filtering to prevent exploitation until the vendor releases a secure version.