What is GHSA-7m9v-p3cj-mv6p?

GHSA-7m9v-p3cj-mv6p is a security advisory published by GitHub Security Advisories with High severity. AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers...

Which CVE IDs does GHSA-7m9v-p3cj-mv6p cover?

GHSA-7m9v-p3cj-mv6p covers the following CVE IDs: CVE-2018-25420. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7m9v-p3cj-mv6p?

GHSA-7m9v-p3cj-mv6p has a CVSS v3 base score of 8.2, published by GitHub Security Advisories.

GHSA-7m9v-p3cj-mv6pHighCVSS 8.2

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers...

Vendor

GitHub Security Advisories

Published

May 30, 2026

Last Modified

May 30, 2026

🔗 CVE IDs covered (1)

CVE-2018-25420 →

📋 Description

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to watch.php with crafted SQL payloads to extract sensitive database information including usernames, database names, and version details.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2018-25420
https://aiopmsd.sourceforge.io
https://sourceforge.net/projects/aiopmsd/files/latest/download
https://www.exploit-db.com/exploits/45690
https://www.vulncheck.com/advisories/aiopmsd-final-sql-injection-via-watch-php
https://github.com/advisories/GHSA-7m9v-p3cj-mv6p