An unauthenticated SQL injection vulnerability in the code-projects Online Ordering System 1.0 poses a significant risk of unauthorized database interaction.

This vulnerability is a SQL injection flaw (CWE-89) located within the /admin/user.php file. It is triggered by manipulating the un argument, and the attack can be executed remotely by an unauthenticated user.

The ability for an unauthenticated attacker to inject malicious SQL commands into the backend database can lead to unauthorized data access, modification, or potential administrative account compromise. While the CVSS score of 7.3 reflects a high severity, the potential for total loss of confidentiality or integrity within the application database necessitates immediate attention to prevent data breaches and unauthorized system access.

Immediate Action: As no official patch is currently available, administrators should restrict network access to the /admin/user.php endpoint or disable the affected functionality until a vendor update is released.

Proactive Monitoring: Monitor web server logs for suspicious HTTP requests targeting /admin/user.php, particularly those containing SQL syntax or unusual characters in the un parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns in incoming requests.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the linked GitHub issue.

Given the availability of a public proof-of-concept and the ease of exploitation via an unauthenticated remote vector, this vulnerability represents a high risk to the availability and integrity of the Online Ordering System. Security teams should prioritize limiting exposure of the web interface and implementing robust input validation via a WAF until an official security update is provided by the vendor.