An unauthenticated SQL injection vulnerability in 1000 Projects Sales Management System 1.0 allows remote attackers to execute arbitrary database queries.

The application is vulnerable to SQL injection via the select2 argument in the /superstore/dist/dordupdate.php file, which can be triggered by an unauthenticated remote attacker.

A successful exploit allows an unauthorized user to manipulate database queries, which may lead to the disclosure, modification, or deletion of sensitive business information. Given the CVSS score of 7.3, this high-severity flaw poses a significant risk to data integrity and confidentiality for organizations utilizing this software.

Immediate Action: Since no official patch is currently available, contact the vendor for security guidance or restrict access to the affected directory /superstore/dist/ via network controls.

Proactive Monitoring: Review web server access logs for requests to dordupdate.php containing anomalous characters or SQL syntax in the select2 parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to inspect and block incoming HTTP requests targeting the vulnerable file with malicious SQL payloads.

Public Exploit Available: Yes, a published proof-of-concept exists via the technical write-up at https://github.com/lan041221/cvec/issues/7.

The presence of a public proof-of-concept combined with the unauthenticated nature of this SQL injection necessitates immediate attention. Organizations are advised to treat this as a high-priority risk and implement strict access controls or WAF filtering until the vendor provides a formal security update.