CVE-2018-25419 in AiOPMSD Finalinfo

Summary

by MITRE • 05/30/2026

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the genre parameter. Attackers can send GET requests to genre.php with crafted SQL payloads in the genre parameter to extract sensitive database information including usernames, database names, and version details.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsible

VulnCheck

Reservation

05/30/2026

Disclosure

05/30/2026

Moderation

accepted

CPE

ready

Exploit

Download

EPSS

0.00068

KEV

no

Activities

very low

Sources

Interested in the pricing of exploits?

See the underground prices here!