An unauthenticated SQL injection vulnerability in SourceCodester Simple Online Food Ordering System version 1.0 creates a high risk of unauthorized database access.

The application is susceptible to SQL injection (CWE-89) due to improper input sanitization. The vulnerability is exploitable by an unauthenticated attacker over the network.

Exploitation of this vulnerability may result in unauthorized access to sensitive customer or order data stored within the system database. With a CVSS score of 7.3, this issue presents a high risk to business operations, potentially leading to data breaches or service disruption.

Immediate Action: As no patch is available, organizations should limit public access to the system and evaluate the necessity of the software in its current state.

Proactive Monitoring: Monitor database query logs for suspicious syntax or unexpected data access patterns.

Compensating Controls: Implement a Web Application Firewall (WAF) to filter malicious SQL queries before they reach the backend database.

Public Exploit Available: No confirmed public exploit exists in the provided data.

Organizations utilizing this software should treat this as a high-priority risk. Until a vendor patch is released, strict network access controls and WAF protection are required to prevent potential compromise of the application and its underlying data.