An unauthenticated SQL injection vulnerability in the Online Reviewer Management System 1.0 poses a critical risk of unauthorized database access and potential system compromise.

The application fails to properly sanitize user input in the id parameter within the /reviewer_0/admins/assessments/databank/btn_functions.php file. This vulnerability allows an unauthenticated attacker to manipulate SQL queries, enabling unauthorized database operations.

A successful exploit allows an attacker to bypass authentication, extract sensitive data, modify database records, or potentially achieve full control over the underlying database. With a CVSS score of 7.3, this high-severity flaw threatens the confidentiality and integrity of the entire application, creating significant risks for data breaches and business disruption.

Immediate Action: Since an official patch is currently unavailable, administrators should restrict access to the affected directory /reviewer_0/admins/assessments/databank/ using network-level controls or web server configurations.

Proactive Monitoring: Review database and web server logs for anomalous query patterns, specifically looking for SQL syntax characters or unexpected database errors originating from the btn_functions.php file.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection payloads targeting GET parameters.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the linked GitHub repository.

Given the availability of a public proof-of-concept and the lack of a vendor-provided patch, this vulnerability presents an immediate and elevated risk. Organizations using this software must restrict external access to the vulnerable endpoint immediately and implement robust WAF filtering to mitigate potential exploitation attempts until a secure update is released.