A critical SQL injection vulnerability in code-projects Online Shop Project 1.0 allows remote, unauthenticated attackers to compromise database integrity.

The application fails to properly sanitize user input in the Password argument within the login.php file. This allows an unauthenticated attacker to execute arbitrary SQL commands against the backend database.

The ability for an unauthenticated user to perform SQL injection poses a significant risk to data confidentiality and integrity. Successful exploitation could lead to unauthorized access to user credentials, sensitive business data, or potential administrative account takeover. Given the CVSS score of 7.3, this flaw represents a high risk that requires immediate attention to prevent unauthorized database manipulation.

Immediate Action: As no official patch is currently available, administrators should immediately restrict access to the login.php endpoint or take the application offline until the vendor releases a security update.

Proactive Monitoring: Monitor database query logs for anomalous syntax, specifically looking for SQL keywords like UNION, SELECT, or SLEEP in authentication requests.

Compensating Controls: Implement a Web Application Firewall (WAF) with strict SQL injection filtering rules to block malicious payloads targeting the login parameter.

Public Exploit Available: Yes, a published proof-of-concept exists via the technical write-up referenced at https://github.com/xiaojuzirr/cve/issues/3.

The presence of a public proof-of-concept combined with the lack of a vendor-supplied patch elevates the urgency of this advisory. Organizations using code-projects Online Shop Project 1.0 must prioritize the implementation of compensating controls, such as WAF rules, to neutralize the threat while awaiting a permanent software update.