


Perceptive Security
SOC/SIEM Consultancy

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code t…
Published:
29 May 2026 at 22:00:00
Alert date:
30 May 2026 at 17:07:56
Source:
nvd.nist.gov
Web Technologies, Database & Storage
CVE-2018-25414 is an SQL injection vulnerability in AiOPMSD Final 1.0.0 that allows unauthenticated attackers to execute arbitrary SQL queries through the actor parameter in actor.php. Attackers can send crafted GET requests with malicious SQL payloads to extract sensitive database information including usernames, database names, and version details. The vulnerability poses a significant risk as it requires no authentication and can lead to complete database compromise. Multiple exploit resources are available including proof-of-concept code on Exploit-DB. The vulnerability affects the open-source AiOPMSD project hosted on SourceForge.
Technical details
Mitigation steps:
Affected products:
AiOPMSD Final
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2018-25414
https://aiopmsd.sourceforge.io/
https://sourceforge.net/projects/aiopmsd/files/latest/download
https://www.exploit-db.com/exploits/45690
https://www.vulncheck.com/advisories/aiopmsd-final-sql-injection-via-actor-php
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
