CVE-2018-25424 — Gate Pass Management System 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the login and password parameters. — CVE Database · The Intelligence Room