A critical SQL injection vulnerability in the SourceCodester Medical Center Portal Management System allows unauthenticated remote attackers to execute arbitrary database queries.

This is a SQL injection vulnerability (CWE-89) located within the login.php file. The vulnerability is triggered by the improper sanitization of the User argument, which can be manipulated by an unauthenticated remote attacker to interact directly with the backend database.

Successful exploitation of this vulnerability permits unauthorized access to sensitive medical records and administrative data stored within the application database. Given the CVSS score of 7.3, this flaw presents a significant risk to data confidentiality and integrity, potentially leading to a complete compromise of the portal system.

Immediate Action: Since no official patch is currently available, administrators should restrict network access to the login portal and implement strict input validation rules to block malicious SQL syntax in the User field.

Proactive Monitoring: Monitor server access logs for anomalous request patterns targeting login.php, specifically looking for characters indicative of SQL injection attempts such as single quotes, semicolons, or SQL keywords.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules specifically configured to detect and block SQL injection patterns targeting the login interface of the application.

Public Exploit Available: Yes, a published proof-of-concept exists via the technical write-up provided in the referenced GitHub issue.

The presence of a public proof-of-concept significantly elevates the risk of automated exploitation. Organizations utilizing this software must prioritize isolating the affected system from public-facing networks until a vendor-supplied patch or permanent code-level fix is implemented.