PT-2026-45112 · Delta Sql · Delta Sql
CVE-2018-25412
·
Published
2026-05-30
·
Updated
2026-07-22
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Delta Sql version 1.8.2
Description
An arbitrary file upload issue allows unauthenticated attackers to upload malicious files by sending POST requests to the 'docs upload.php' endpoint using crafted multipart form data. This allows the upload of PHP files with arbitrary content to the upload directory, which can then be executed on the server to achieve remote code execution.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
RCE
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Delta Sql