What’s Vulnerable › Vulnerabilities

CVE-2018-25412: Delta Sql 1.8.2 Arbitrary File Upload via docs_upload.php

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-05-30 · updated 2026-07-22
• Weakness: CWE-306

Description

Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to docs_upload.php with crafted multipart form data. Attackers can upload PHP files with arbitrary content to the upload directory and execute them on the server for remote code execution.

Affected products

• Deltasql Delta Sql: 1.8.2

References

• http://deltasql.sourceforge.net/
• http://deltasql.sourceforge.net/deltasql/
• https://sourceforge.net/projects/deltasql/files/latest/download
• https://www.exploit-db.com/exploits/45685
• https://www.vulncheck.com/advisories/delta-sql-arbitrary-file-upload-via-docs-upload-php

Get alerted when CVE-2018-25412 or the next vulnerability affects your stack