An unauthenticated SQL injection vulnerability in SourceCodester Best Salon Management System 1.0 poses a critical risk of full database compromise and unauthorized data access.

This is a time-based blind SQL injection vulnerability located in the email parameter of the /panel/forgot-password.php endpoint. The application fails to sanitize user input, allowing an unauthenticated remote attacker to manipulate SQL queries.

Successful exploitation grants an attacker the ability to bypass authentication, extract sensitive administrative or user data, and potentially gain full control over the underlying database. Given the CVSS score of 7.3, this vulnerability represents a significant risk to confidentiality and integrity, potentially leading to total system compromise and severe reputational damage.

Immediate Action: As no official patch is available, administrators must restrict network access to the /panel/forgot-password.php endpoint or disable the affected functionality entirely until a vendor-supplied update is released.

Proactive Monitoring: Review application logs for anomalous POST requests to the forgot-password.php file, particularly those containing SQL syntax or unusual time delays in server responses.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection patterns targeting the email parameter.

Public Exploit Available: Yes, a published proof-of-concept exists as detailed in the referenced security research write-up.

Given the availability of public proof-of-concept material and the lack of a vendor-provided patch, users of this software are at elevated risk. Organizations should immediately isolate the affected system from public-facing networks and implement strict input validation at the WAF layer to mitigate the potential for unauthorized database manipulation.