The SourceCodester Online Reviewer Management System version 1.0 is vulnerable to unauthenticated SQL injection, posing a severe risk of unauthorized database access and potential system compromise.

This is a SQL injection vulnerability located in the /reviewer_0/admins/assessments/subject/btn_functions.php file. An unauthenticated attacker can manipulate the id parameter within the GET request to execute arbitrary SQL queries against the backend database.

Successful exploitation of this vulnerability allows an attacker to bypass authentication, extract sensitive data, modify database records, or potentially achieve full system control. Given the CVSS score of 7.3, this flaw represents a significant risk to data integrity and confidentiality, which could lead to severe reputational damage and operational disruption if the application is used to store sensitive reviewer or administrative information.

Immediate Action: As no official vendor patch is currently available, administrators should restrict network access to the affected application and implement strict input validation on the id parameter.

Proactive Monitoring: Review web server access logs for anomalous GET requests targeting btn_functions.php containing SQL syntax or encoded characters.

Compensating Controls: Deploy a Web Application Firewall (WAF) to detect and block common SQL injection patterns targeting the identified vulnerable endpoint.

Public Exploit Available: Yes, a published proof-of-concept exists, attributed to the research write-up hosted on GitHub.

Given the ease of exploitation and the lack of a formal vendor-supplied patch, organizations using the Online Reviewer Management System 1.0 must treat this as a high-priority risk. Immediate steps should be taken to isolate the application from external networks, and users are encouraged to monitor vendor communication channels for future security updates or consider migrating to a more secure platform.