This critical vulnerability in the Stock-Inventory-Management-System allows unauthenticated remote attackers to gain full administrative access via SQL injection or hardcoded credentials.

The application is susceptible to SQL injection due to improper sanitization of login parameters, which is compounded by the presence of hardcoded administrative credentials. An unauthenticated attacker can leverage these flaws to bypass security controls entirely.

A successful exploit grants an attacker unrestricted administrative access to the inventory system. This could lead to the complete compromise of sensitive inventory data, unauthorized modification of records, and potential system-wide disruption, justifying the critical CVSS score of 9.8.

Immediate Action: Update to the latest version of the application as soon as the vendor provides a patch. In the interim, restrict access to the login interface using network-level controls.

Proactive Monitoring: Review application access logs for anomalous login patterns or SQL syntax characters in authentication fields.

Compensating Controls: Implement a Web Application Firewall (WAF) with SQL injection protection rules to block malicious payloads targeting the login module.

Public Exploit Available: No

Given the critical nature of this vulnerability and the ease of exploitation through trivial SQL injection or known credentials, organizations should prioritize the removal or patching of this software. Immediate action is required to prevent unauthorized access and potential data exfiltration.