Read the docs

Tina4

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Tina4 records in CISA KEV

No Tina4 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tina4 Stack 2 records HIGH

Records

2 records in Tina4 Stack · all components

TI-2018-15412 CVE-2018-25187 · GHSA-69cw-9g25-672r

Tina4 Stack 1.0.3 SQL Injection and Database File Download

Priority HIGH 77

Tina4 Stack 1.0.3 contains multiple vulnerabilities allowing unauthenticated attackers to access sensitive database files and execute SQL injection attacks.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00394 Published 2026-03-06 No fix listed CWE-89
TI-2018-15411 CVE-2018-25186 · GHSA-53q7-qj3f-vj3q

Tina4 Stack 1.0.3 Cross-Site Request Forgery via profile

Priority MEDIUM 64

Tina4 Stack 1.0.3 contains a cross-site request forgery vulnerability that allows attackers to modify admin user credentials by submitting forged POST requests to the profile endpoint.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00159 Published 2026-03-06 No fix listed CWE-352
Open these records in search →