High severity8.2NVD Advisory· Published Dec 24, 2025· Updated Apr 15, 2026

CVE-2018-25128

Description

SOCA Access Control System 180612 contains multiple SQL injection vulnerabilities that allow attackers to manipulate database queries through unvalidated POST parameters. Attackers can bypass authentication, retrieve password hashes, and gain administrative access with full system privileges by exploiting injection flaws in Login.php and Card_Edit_GetJson.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Patches

Vulnerability mechanics

References

www.socatech.comnvd
www.exploit-db.com/exploits/46833nvd
www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5519.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000