


Perceptive Security
SOC/SIEM Consultancy

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code t…
Published:
29 May 2026 at 22:00:00
Alert date:
30 May 2026 at 17:07:56
Source:
nvd.nist.gov
Web Technologies, Database & Storage
CVE-2018-25417 affects AiOPMSD Final 1.0.0 with an SQL injection vulnerability in the quality parameter. Unauthenticated attackers can execute arbitrary SQL queries by sending crafted GET requests to quality.php. The vulnerability allows extraction of sensitive database information including usernames, database names, and version details. This represents a critical security flaw that enables unauthorized database access without authentication requirements.
Technical details
Mitigation steps:
Affected products:
AiOPMSD Final
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2018-25417
https://aiopmsd.sourceforge.io/
https://sourceforge.net/projects/aiopmsd/files/latest/download
https://www.exploit-db.com/exploits/45690
https://www.vulncheck.com/advisories/aiopmsd-final-sql-injection-via-quality-php
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
