A critical SQL injection vulnerability in the SourceCodester Online Food Ordering System allows authenticated attackers to gain full control over the backend database.

This vulnerability is a SQL injection flaw located in the Actions.php file, specifically within the save_category action. An authenticated attacker can exploit this by injecting malicious input into the name parameter, which fails to undergo proper sanitization.

The exploitation of this vulnerability permits unauthorized access to sensitive data, potential modification of records, and the ability to execute administrative commands against the underlying database. With a CVSS score of 8.8, this flaw represents a high risk to data integrity and system availability, as it could lead to full database compromise and subsequent application takeover.

Immediate Action: Since an official patch is currently unavailable, administrators should restrict access to the application to trusted users only and implement strict input validation on all form fields.

Proactive Monitoring: Monitor database query logs for unusual syntax, such as union selects or unexpected command execution attempts originating from the application service account.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the save_category action.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the provided GitHub repository reference.

Given the high CVSS score and the presence of a public proof-of-concept, this vulnerability poses a significant risk to the security of the Online Food Ordering System. Organizations should prioritize isolating the application from untrusted networks and implementing robust WAF rules to mitigate the risk until an official vendor patch is released.