SQL Injection Vulnerability in Online Shopping System

A critical SQL injection vulnerability has been identified in the code-projects Online Shopping System version 1.0. The vulnerability resides within the Search Functionality component, specifically in the /action.php file. Attackers can exploit this by manipulating the 'keyword' argument, which lacks sufficient input sanitization before being processed by the underlying database engine. This flaw allows for remote, unauthenticated execution of arbitrary SQL commands, potentially leading to unauthorized data extraction, modification, or deletion. The vulnerability has been publicly disclosed, increasing the risk of exploitation by automated scanners and opportunistic threat actors. Organizations utilizing this software should restrict access to the application or implement robust input validation and parameterized queries to mitigate the risk until a vendor patch is released.

Impact

Successful exploitation of this SQL injection vulnerability allows an unauthenticated remote attacker to gain unauthorized access to the application's database. Potential impacts include full database compromise, exfiltration of sensitive user or transaction data, and in some configurations, the ability to modify application data or gain elevated privileges. Given the nature of an Online Shopping System, the stored data likely includes PII and payment-related information, making this a high-risk security flaw.

Recommendation

• Monitor web application logs for HTTP POST/GET requests to /action.php containing common SQL injection payloads such as 'UNION SELECT', 'OR 1=1', or characters like quotes and comment markers.
• Implement strict input validation or use parameterized SQL queries for the 'keyword' parameter in all search functions.
• Block or restrict public access to the vulnerable /action.php endpoint if it is not business-critical, or until the vulnerability is remediated.