AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code t…

CVE-2018-25415 affects AiOPMSD Final 1.0.0, containing an SQL injection vulnerability in the director parameter. Unauthenticated attackers can exploit this by sending GET requests to director.php with malicious SQL payloads. The vulnerability allows extraction of sensitive database information including usernames, database names, and version details. This represents a critical security flaw that provides unauthorized database access without authentication requirements.