SourceCodester Online Shop Project 1.0 is vulnerable to unauthenticated remote SQL injection, presenting a significant risk of unauthorized database access.

This vulnerability is a SQL injection flaw (CWE-89) located in the action.php file. It allows an unauthenticated remote attacker to manipulate the Search parameter to execute arbitrary SQL commands.

The ability to perform SQL injection allows an attacker to bypass authentication, extract sensitive customer or administrative data, or potentially modify database contents. With a CVSS score of 7.3, this high-severity vulnerability threatens the confidentiality and integrity of the application, which could lead to significant reputational damage and data loss for organizations using this software.

Immediate Action: As no official patch is currently identified, administrators should restrict public access to the affected web directory or disable the search functionality until a secure update is released by the vendor.

Proactive Monitoring: Review web server access logs for suspicious patterns in the Search parameter, such as SQL keywords or unusual character sequences, which may indicate exploitation attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection payloads directed at the action.php endpoint.

Public Exploit Available: Yes, a published PoC exists, attributed to the technical write-up at the provided GitHub reference.

Given the availability of a public proof-of-concept, the risk of exploitation is elevated. Organizations currently running SourceCodester Online Shop Project 1.0 must treat this as a high-priority item, implement the recommended WAF protections, and monitor for vendor updates to remediate the underlying flaw immediately.