CVE-2018-25422 is an SQL injection vulnerability in the MOGG web simulator Script that allows unauthenticated attackers to execute arbitrary SQL commands through the id parameter in play.php. Attackers can send crafted GET requests with malicious SQL payloads to extract sensitive database information including usernames and other data. The vulnerability affects all versions of the MOGG web simulator and can be exploited without authentication, making it a high-risk security issue for affected systems.