A critical SQL injection vulnerability exists in SourceCodester Online Catering Reservation 1.0 that allows remote, unauthenticated attackers to manipulate database queries.

This vulnerability is a SQL injection flaw located within the search.php file, which fails to properly sanitize the rcode argument. The vulnerability is exploitable by an unauthenticated remote attacker.

The presence of an unauthenticated SQL injection vulnerability poses a significant risk to data confidentiality and integrity. An attacker can leverage this flaw to extract sensitive information from the database or manipulate records, leading to potential data breaches and system compromise. Given the CVSS score of 7.3, this issue represents a high-severity risk that requires immediate attention to prevent unauthorized database access.

Immediate Action: As no official vendor patch is currently available, administrators should restrict public access to the application or implement strict input validation on the search.php endpoint.

Proactive Monitoring: Review web server access logs for anomalous requests containing SQL syntax or unusual parameters directed at the search.php file.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the rcode parameter.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the technical write-up provided by the researcher at https://github.com/WHOAMI-xiaoyu/CVE/blob/main/CVE_5.md.

Due to the availability of a public proof-of-concept and the lack of a vendor-supplied patch, this vulnerability presents an immediate risk to any environment hosting the affected software. Security teams must treat this as a priority and implement stringent access controls or WAF filtering to mitigate the risk of SQL injection until a permanent fix is released by the vendor.