An unauthenticated SQL injection vulnerability in SourceCodester Train Station Ticketing System 1.0 poses a significant risk of unauthorized database interaction and information disclosure.

This vulnerability is a SQL injection flaw (CWE-89) located in the ajax.php file, triggered by the Username argument. The vulnerability allows unauthenticated remote attackers to execute arbitrary SQL commands against the backend database.

Successful exploitation of this vulnerability could lead to unauthorized access to sensitive ticketing data, potential modification of records, or the compromise of database integrity. With a CVSS score of 7.3, this high-severity flaw represents a significant risk to the confidentiality and availability of the ticketing application, which may contain user or administrative data.

Immediate Action: As no official patch is currently available, administrators should restrict access to the affected endpoint or disable the ticketing system until a vendor-supplied update is released.

Proactive Monitoring: Security teams should review web server access logs for anomalous requests containing SQL syntax patterns targeted at the ajax.php endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection payloads targeting the application login parameters.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the provided GitHub repository reference.

Given the availability of a public proof-of-concept and the ease of remote exploitation, this vulnerability requires immediate attention. Organizations currently running version 1.0 of the SourceCodester Train Station Ticketing System should prioritize isolating the application from external networks or applying robust WAF filtering until an official security patch is provided by the vendor.