top of page
perceptive_background_267k.jpg

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code t…

Published:

29 May 2026 at 22:00:00

Alert date:

30 May 2026 at 17:07:56

Source:

nvd.nist.gov

Click to open the original link from this advisory

Web Technologies, Database & Storage

CVE-2018-25414 is an SQL injection vulnerability in AiOPMSD Final 1.0.0 that allows unauthenticated attackers to execute arbitrary SQL queries through the actor parameter in actor.php. Attackers can send crafted GET requests with malicious SQL payloads to extract sensitive database information including usernames, database names, and version details. The vulnerability poses a significant risk as it requires no authentication and can lead to complete database compromise. Multiple exploit resources are available including proof-of-concept code on Exploit-DB. The vulnerability affects the open-source AiOPMSD project hosted on SourceForge.

Technical details

Mitigation steps:

Affected products:

AiOPMSD Final

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page