A critical SQL injection vulnerability in SourceCodester Company Website CMS 1.0 allows unauthenticated remote attackers to compromise database integrity.

The application is susceptible to SQL injection through the email argument within the /admin/reset-password.php file. The vulnerability is exploitable by an unauthenticated remote attacker.

This vulnerability poses a significant risk to the confidentiality and integrity of the application database. With a CVSS score of 7.3, it represents a high-severity threat that could lead to unauthorized data exfiltration or administrative bypass. Successful exploitation may result in full compromise of the backend database, potentially leading to total system instability or unauthorized access to sensitive user information.

Immediate Action: As no official patch is currently available, administrators should restrict public access to the /admin/reset-password.php endpoint or disable the password reset functionality until a security update is released by the vendor.

Proactive Monitoring: Security teams should implement enhanced monitoring on database query logs for suspicious patterns or unexpected syntax, particularly targeting requests directed at the password reset module.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules specifically configured to detect and block common SQL injection payloads targeting input parameters like email.

Public Exploit Available: Yes, a public proof-of-concept exists via the technical write-up published on GitHub.

Given the availability of a public proof-of-concept and the ease of exploitation, this vulnerability requires immediate attention. Organizations utilizing SourceCodester Company Website CMS 1.0 should prioritize implementing the suggested compensating controls and monitor for vendor updates to address this SQL injection flaw permanently.