Assessment Management 1.0 contains a critical SQL injection vulnerability in its login mechanism that permits unauthenticated remote attackers to compromise the underlying database.

The application fails to properly sanitize user-supplied input within the userid parameter of the login.php file. This flaw allows an unauthenticated attacker to inject malicious SQL commands, enabling unauthorized database access and potential system-wide control.

The ability for an unauthenticated user to execute arbitrary SQL queries poses a severe risk to data confidentiality, integrity, and availability. Successful exploitation can lead to the exfiltration of sensitive user credentials, unauthorized modification of application data, or complete database compromise. Given the CVSS score of 7.3, this vulnerability represents a high-risk entry point that could facilitate further lateral movement within the network.

Immediate Action: As no official patch is currently available, administrators should restrict access to the application via network-level controls or disable the service until the vendor provides a secure update.

Proactive Monitoring: Review web server and database logs for anomalous query patterns, specifically looking for SQL syntax errors or unexpected inputs associated with the login.php endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection protection rules to filter and block malicious payloads targeting the userid parameter.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the GitHub issue referenced by the vulnerability record.

The presence of a public proof-of-concept combined with the lack of an official patch makes this an urgent security concern. Organizations currently running Assessment Management 1.0 should prioritize immediate isolation of the affected system from public-facing networks. Until the vendor releases a remediated version, implement robust WAF rules and perform a thorough audit of the database to ensure no unauthorized access has already occurred.