Simple Stock System 1.0 contains an unauthenticated SQL injection vulnerability that could allow remote attackers to extract, modify, or delete sensitive data from the underlying database.

This is a SQL injection vulnerability (CWE-89) located in the logout.php file. An unauthenticated attacker can inject malicious SQL commands via the uname parameter, which is processed without proper sanitization.

Successful exploitation allows an attacker to gain unauthorized access to the database, potentially leading to the leakage of sensitive business information, data tampering, or total system compromise. While the CVSS score of 7.3 reflects a high severity, the ability for unauthenticated remote attackers to execute arbitrary SQL queries represents a significant threat to data integrity and confidentiality.

Immediate Action: As no official patch is currently available, administrators should restrict access to the affected web application via network controls and implement input validation routines within the logout.php source code to sanitize the uname parameter.

Proactive Monitoring: Review web server access logs for anomalous GET requests targeting logout.php that contain suspicious characters or SQL syntax patterns, such as UNION, SELECT, or sleep commands.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection patterns in HTTP requests targeting the application.

Public Exploit Available: Yes, a published proof-of-concept exists in a security research write-up hosted on GitHub.

Given the availability of a public proof-of-concept and the lack of an official vendor patch, this vulnerability poses a clear risk to any environment running Simple Stock System 1.0. Organizations should immediately isolate the affected application from public-facing networks or implement robust WAF protections to mitigate the risk of exploitation.