


Perceptive Security
SOC/SIEM Consultancy

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code t…
Published:
29 May 2026 at 22:00:00
Alert date:
30 May 2026 at 17:07:56
Source:
nvd.nist.gov
Web Technologies, Database & Storage
AiOPMSD Final 1.0.0 contains a SQL injection vulnerability in the country parameter of country.php. Unauthenticated attackers can execute arbitrary SQL queries through crafted GET requests. The vulnerability allows extraction of sensitive database information including usernames, database names, and version details. Attackers can inject malicious SQL code through the country parameter to compromise the database. This represents a high-severity security issue affecting the AiOPMSD application.
Technical details
Mitigation steps:
Affected products:
AiOPMSD Final
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2018-25416
https://aiopmsd.sourceforge.io/
https://sourceforge.net/projects/aiopmsd/files/latest/download
https://www.exploit-db.com/exploits/45690
https://www.vulncheck.com/advisories/aiopmsd-final-sql-injection-via-country-php
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
