A critical SQL injection vulnerability in SourceCodester Best Salon Management System 1.0 enables unauthenticated remote attackers to compromise the underlying database, posing a severe risk to data integrity and system confidentiality.

The application fails to properly sanitize the serv_id parameter within the booking.php file before incorporating it into database queries. This vulnerability allows an unauthenticated attacker to perform SQL injection attacks, facilitating unauthorized data access and potential system compromise.

Successful exploitation of this vulnerability allows unauthorized actors to bypass security controls, leading to the potential exfiltration of sensitive salon data, unauthorized modification of records, or complete database compromise. Given the CVSS score of 7.3, this flaw represents a significant risk to business operations, as it allows for the disruption of booking services and the potential loss of customer trust through data exposure.

Immediate Action: As no official vendor patch is currently available, administrators should restrict public access to the booking.php endpoint at the network or web server level until a secure update is released.

Proactive Monitoring: Review web server access logs for suspicious POST requests to booking.php containing SQL syntax characters, such as single quotes, semicolons, or sleep commands.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules specifically configured to detect and block SQL injection patterns in the serv_id parameter.

Public Exploit Available: Yes, a public proof-of-concept and technical write-up are available on GitHub via the Scorbunny2 repository.

The presence of a public proof-of-concept significantly increases the risk of this vulnerability being targeted by automated scanners. Organizations currently utilizing SourceCodester Best Salon Management System 1.0 must treat this as a high-priority item. In the absence of a vendor-supplied patch, immediate network-level isolation of the vulnerable booking functionality is the most effective method to mitigate the risk of unauthorized database access.