MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands by injecting malicious…

CVE-2018-25422 is an SQL injection vulnerability in the MOGG web simulator Script that allows unauthenticated attackers to execute arbitrary SQL commands through the id parameter in play.php. Attackers can send crafted GET requests with malicious SQL payloads to extract sensitive database information including usernames and other data. The vulnerability affects all versions of the MOGG web simulator and can be exploited without authentication, making it a high-risk security issue for affected systems.