The Online Appointment Booking System version 1.0 is vulnerable to remote SQL injection, which could allow an unauthenticated attacker to compromise backend database operations.

This flaw is a SQL injection vulnerability (CWE-89) located in the /cover.php file. An unauthenticated attacker can supply malicious input via the uname or psw parameters to execute unauthorized database queries.

The ability for an unauthenticated user to inject SQL commands into the application poses a significant risk to data integrity and confidentiality. Successful exploitation could lead to unauthorized access to user credentials or sensitive appointment data. While the CVSS score is 7.3, the potential for automated exploitation makes this a high-priority risk for organizations hosting this software.

Immediate Action: As no official patch is currently available, administrators should restrict access to the affected /cover.php file or disable the vulnerable system until the vendor provides a security update.

Proactive Monitoring: Review web server access logs for anomalous requests to /cover.php, specifically monitoring for SQL syntax patterns or unexpected character strings in the uname and psw parameters.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection filtering rules to block malicious payloads targeting the identified parameters.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the GitHub issue referenced in the vulnerability record.

Given the availability of a public proof-of-concept and the unauthenticated nature of the attack, this vulnerability presents an elevated risk. Organizations should prioritize isolating the affected system from public networks immediately and implement WAF protections to mitigate the risk of exploitation while awaiting a vendor-supplied patch.