A critical SQL injection vulnerability in code-projects Simple Food Ordering System 1.0 allows unauthenticated remote attackers to compromise database integrity.

This is a SQL injection vulnerability (CWE-89) located in the product.php file. The application fails to properly sanitize the Category argument, allowing an unauthenticated remote attacker to execute arbitrary SQL commands.

The ability to perform unauthorized SQL queries poses a severe risk to data confidentiality and integrity. An attacker could extract sensitive user data, modify application records, or disrupt service availability. With a CVSS score of 7.3, this high-severity flaw requires immediate attention to prevent unauthorized database access.

Immediate Action: As no official patch is currently available, administrators should restrict access to the affected web application or disable the vulnerable product.php endpoint if possible.

Proactive Monitoring: Review web server access logs for anomalous GET or POST requests containing SQL syntax, such as UNION, SELECT, or comment characters, directed toward product.php.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the Category parameter.

Public Exploit Available: Yes, a public proof-of-concept exists, as documented in the technical write-up at https://github.com/tiancesec/CVE/issues/6.

Given the availability of a public proof-of-concept and the ease of exploitation, this vulnerability presents an elevated risk to any organization running the Simple Food Ordering System. Organizations must prioritize the implementation of compensating controls, such as WAF filtering, and isolate the application until a formal vendor patch is released.