A critical SQL injection vulnerability in code-projects Simple Shopping Cart 1.0 allows for unauthenticated remote exploitation of the application database.

This vulnerability is a SQL injection flaw (CWE-89) located in the userlogin.php script. An unauthenticated attacker can manipulate the user_email parameter to execute arbitrary SQL commands against the backend database.

The ability for an unauthenticated user to inject SQL commands poses a severe risk to data confidentiality and integrity. Successful exploitation could lead to unauthorized access to sensitive user information, administrative credentials, or full database compromise. While the CVSS score is 7.3, the ease of remote execution without authentication necessitates immediate attention to prevent potential data exfiltration.

Immediate Action: As no official patch is currently identified, users should restrict access to the application or disable the vulnerable user login functionality until a vendor-supplied update is released.

Proactive Monitoring: Review web server access logs for anomalous characters in the user_email parameter and monitor database audit logs for unauthorized query patterns or unexpected administrative actions.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the userlogin.php endpoint.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the referenced GitHub issue.

Given the availability of a public proof-of-concept and the ease of remote exploitation, this vulnerability presents a significant risk to any environment hosting the affected software. Organizations should prioritize isolating the application and monitoring for signs of unauthorized database access while awaiting a formal security update from the vendor.