A critical SQL injection vulnerability in Simple Shopping Cart 1.0 exposes the application to unauthenticated remote database manipulation.

The application is susceptible to SQL injection (CWE-89) via the order_price parameter within the /Customers/save_order.php endpoint, which can be exploited by an unauthenticated remote attacker.

The vulnerability allows for unauthorized database interaction, potentially resulting in data exfiltration or integrity loss. With a CVSS score of 7.3, this flaw poses a significant risk to the confidentiality and integrity of customer order data, which could lead to severe reputational damage and potential regulatory non-compliance.

Immediate Action: As no official patch is currently available, administrators should restrict access to the /Customers/save_order.php endpoint or disable the affected functionality until a vendor update is released.

Proactive Monitoring: Review web server access logs for anomalous requests containing SQL syntax or unusual characters directed at the save_order.php file.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to inspect and block incoming requests containing SQL injection patterns targeting the order_price parameter.

Public Exploit Available: Yes, a public proof-of-concept has been published via the researcher write-up at the provided GitHub reference.

Given the availability of a public proof-of-concept and the ease of remote exploitation, this vulnerability requires immediate attention. Security teams must prioritize restricting access to the vulnerable endpoint and implementing WAF protections to prevent potential database compromise until the vendor provides an official security update.