PT-2026-45124 · Unknown · Gate Pass Management System

Published 2026-05-30 · Updated 2026-05-30 · CVE-2018-25424

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Gate Pass Management System version 2.1

Description An SQL injection allows unauthenticated attackers to bypass authentication by injecting SQL code. Attackers can submit crafted POST requests to the 'login-exec.php' endpoint using SQL injection payloads in the login and password parameters to gain unauthorized access to the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2018-25424

Affected Products

Gate Pass Management System

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2018-25424 · Security Note
• https://t.me/cveNotify/165334 · Telegram Post
• https://netcologne.dl.sourceforge.net/project/gatepass/gpms_Update.zip · Note
• http://livebms.com · Note
• https://vulncheck.com/advisories/gate-pass-management-system-sql-injection-via-login-exec-php · Note
• https://t.me/CVEtracker/55345 · Telegram Post
• https://exploit-db.com/exploits/45766 · Note