AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code t…

Published:

29 mei 2026 om 22:00:00

Alert date:

30 mei 2026 om 17:07:56

Source:

nvd.nist.gov

Web Technologies, Database & Storage

CVE-2018-25418 affects AiOPMSD Final 1.0.0, containing an SQL injection vulnerability in the year parameter of year.php. Unauthenticated attackers can execute arbitrary SQL queries through GET requests with crafted payloads. The vulnerability allows extraction of sensitive database information including usernames, database names, and version details. This represents a critical security flaw that enables unauthorized database access without authentication requirements.

Technical details

Mitigation steps:

Affected products:

AiOPMSD Final