CVE-2018-25413

Vulnerability

AiOPMSD Final 1.0.0 (build 4, released September 2017) contains an SQL injection vulnerability in search.php. The q parameter is not sanitized before being used in SQL queries, allowing unauthenticated attackers to inject arbitrary SQL. The software is a PHP/MySQL movie streaming script. [1][2][3]

Exploitation

An attacker can send a GET request to search.php with a crafted q parameter containing SQL injection payloads. No authentication is required. The attacker only needs network access to the web server. [3]

Impact

Successful exploitation allows the attacker to execute arbitrary SQL queries, leading to extraction of sensitive database information such as usernames, database names, and database version details. This can compromise the confidentiality of the application's data. [3]

Mitigation

As of the available references, no official patch has been released for this vulnerability. The software appears to be final and no longer maintained. Users should consider migrating to an alternative solution or implementing a web application firewall (WAF) to block malicious SQL injection attempts. Input validation and parameterized queries should be applied to search.php. [1][2][3]