An unauthenticated SQL injection vulnerability in Razinsoft Ready eCommerce allows remote attackers to compromise the entire database and potentially gain system-level access.

This is an SQL injection vulnerability (CWE-89) located in the product listing API of ProductController.php. An unauthenticated attacker can inject malicious SQL commands via the rating parameter to bypass security controls and interact directly with the underlying database.

The ability for an unauthenticated attacker to execute arbitrary SQL commands poses a severe risk to data confidentiality and integrity. Successful exploitation could lead to the total exposure of user credentials, sensitive customer information, and administrative password hashes. Given the database connection runs with root privileges, there is a significant risk of lateral movement and full server compromise, justifying the 9.8 CVSS score.

Immediate Action: Upgrade Razinsoft Ready eCommerce to version 4.5.2 or later immediately to incorporate the necessary parameterization of the rating input.

Proactive Monitoring: Review database query logs for unusual time-based patterns or syntax errors that may indicate blind SQL injection attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection filtering rules to inspect and block malicious payloads targeting the product endpoint.

Public Exploit Available: Unknown

This is a critical vulnerability that requires immediate attention due to the potential for unauthenticated, full-database compromise. Organizations currently running affected versions of Ready eCommerce must prioritize patching and verify that their database service accounts follow the principle of least privilege to minimize potential damage from similar future flaws.