Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the director parameter. Attackers can send GET requests to director.php with crafted SQL payloads in the director parameter to extract sensitive database information including usernames, database names, and version details.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-30 | 1 | Disclosure1 |
| 2026-07-27 | 1 | Patch1 |
🚨 HIGH SEVERITY: CVE-2018-25415 (CVSS 8.2) AiOPMSD Final 1.0.0 vulnerable to unauthenticated SQL injection via director parameter. Attackers can extract sensitive DB info remotely. Patch immediately if affected. #CVE #Vulnerability #PatchNow https://t.co/DGk7JutLc3
Post summary
The tweet alerts about CVE-2018-25415, an unauthenticated SQL injection in AiOPMSD Final 1.0.0, and urges users to apply a patch immediately.
CVE-2018-25415 AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through… https://www.cve.org/CVERecord?id=CVE-2018-25415
Post summary
The text reports the disclosure of a SQL injection vulnerability (CVE-2018-25415) in AiOPMSD Final 1.0.0 that permits unauthenticated attackers to run arbitrary SQL queries.