An unauthenticated SQL injection vulnerability in Code-Projects Online Shopping System version 1.0 allows remote attackers to compromise sensitive database information.

This is a time-based blind SQL injection flaw located in the search functionality at the /action.php endpoint. By manipulating the unauthenticated keyword parameter, an attacker can execute arbitrary SQL expressions and infer database content through observable variations in server response times.

Successful exploitation of this vulnerability can lead to the unauthorized extraction of sensitive data stored in the database, including user records, administrator credentials, and order history. Given the CVSS score of 7.3, this represents a significant risk to data confidentiality and application integrity, potentially leading to widespread account compromise and severe reputational damage.

Immediate Action: There is currently no official vendor patch available. Administrators should restrict access to the /action.php endpoint or disable the search functionality until a secure update is provided by the vendor.

Proactive Monitoring: Review web server and database access logs for unusual patterns, such as repeated requests to /action.php containing SQL syntax, or anomalous response times associated with search queries.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection patterns, specifically targeting the keyword parameter in POST requests.

Public Exploit Available: Yes, a proof-of-concept exists as documented in the security researcher's write-up published on GitHub.

This vulnerability presents a high risk due to its accessibility to unauthenticated users and the availability of public exploit documentation. Organizations utilizing this software must prioritize the implementation of compensating controls, such as WAF filtering, and monitor for unauthorized activity while awaiting an official security update from the vendor.