CVE-2018-25412

Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to docs_upload.php with crafted multipart form data. Attackers can upload PHP files with arbitrary content to the upload directory and execute them on the server for remote code execution.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
http://deltasql.sourceforge.net/	Product
http://deltasql.sourceforge.net/deltasql/	Product
https://sourceforge.net/projects/deltasql/files/latest/download	Product
https://www.exploit-db.com/exploits/45685	Exploit Third Party Advisory
https://www.vulncheck.com/advisories/delta-sql-arbitrary-file-upload-via-docs-upload-php	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:deltasql_project:deltasql:1.8.2:*:*:*:*:*:*:*

History

03 Jun 2026, 19:26

Type	Values Removed	Values Added
CPE		cpe:2.3:a:deltasql_project:deltasql:1.8.2:::::::*
References	~~() http://deltasql.sourceforge.net/ -~~	() http://deltasql.sourceforge.net/ - Product
References	~~() http://deltasql.sourceforge.net/deltasql/ -~~	() http://deltasql.sourceforge.net/deltasql/ - Product
References	~~() https://sourceforge.net/projects/deltasql/files/latest/download -~~	() https://sourceforge.net/projects/deltasql/files/latest/download - Product
References	~~() https://www.exploit-db.com/exploits/45685 -~~	() https://www.exploit-db.com/exploits/45685 - Exploit, Third Party Advisory
References	~~() https://www.vulncheck.com/advisories/delta-sql-arbitrary-file-upload-via-docs-upload-php -~~	() https://www.vulncheck.com/advisories/delta-sql-arbitrary-file-upload-via-docs-upload-php - Third Party Advisory
First Time		Deltasql Project deltasql Deltasql Project

30 May 2026, 16:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-30 16:17

Updated : 2026-06-03 19:26

NVD link : CVE-2018-25412

Mitre link : CVE-2018-25412

CVE.ORG link : CVE-2018-25412

JSON object : View

Products Affected

deltasql_project

deltasql

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2018-25412", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2026-05-30T16:17:01.990", "references": [{"url": "http://deltasql.sourceforge.net/", "tags": ["Product"], "source": "disclosure@vulncheck.com"}, {"url": "http://deltasql.sourceforge.net/deltasql/", "tags": ["Product"], "source": "disclosure@vulncheck.com"}, {"url": "https://sourceforge.net/projects/deltasql/files/latest/download", "tags": ["Product"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.exploit-db.com/exploits/45685", "tags": ["Exploit", "Third Party Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/delta-sql-arbitrary-file-upload-via-docs-upload-php", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to docs_upload.php with crafted multipart form data. Attackers can upload PHP files with arbitrary content to the upload directory and execute them on the server for remote code execution."}], "lastModified": "2026-06-03T19:26:58.643", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:deltasql_project:deltasql:1.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73C816FB-5EC8-4299-90F2-313D149A5DEC"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}