An unauthenticated SQL injection vulnerability in the SourceCodester Drug Recommendation System allows remote attackers to execute arbitrary database commands and extract sensitive information.

The application fails to sanitize the id parameter in the /Admin/edit_symptom.php endpoint, which is directly concatenated into SQL queries. This allows an unauthenticated attacker to inject malicious SQL commands to bypass authentication or dump database contents.

Successful exploitation poses a severe risk to the confidentiality and integrity of the application. An attacker can extract administrative credentials, access sensitive patient data, or compromise the entire underlying database. Given the CVSS score of 7.3, this flaw represents a significant risk to any organization deploying this software in a production or sensitive environment.

Immediate Action: As no official vendor patch is currently available, administrators should restrict network access to the /Admin/ directory to trusted internal IP addresses only.

Proactive Monitoring: Review web server access logs for anomalous GET requests targeting /Admin/edit_symptom.php containing SQL syntax characters, such as single quotes, semicolons, or time-based delay commands.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the id parameter.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the researcher write-up at the provided GitHub repository.

Due to the critical nature of SQL injection and the public availability of exploit code, immediate action is required to protect the system. Because an official fix is currently unknown, administrators must prioritize network-level restrictions and WAF implementation to mitigate the exposure of the administrative interface to the public internet.