Read the docs

Tomalofficial

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Tomalofficial records in CISA KEV

No Tomalofficial vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Php Oop Cms Blog 2 records HIGH

Records

2 records in Php Oop Cms Blog · all components

TI-2018-15424 CVE-2018-25199 · GHSA-v475-qmmw-72m8

OOP CMS BLOG 1.0 SQL Injection via search parameter

Priority HIGH 77

OOP CMS BLOG 1.0 contains SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through multiple parameters.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0041 Published 2026-03-06 No fix listed CWE-89
TI-2018-15425 CVE-2018-25200 · GHSA-qxvj-wxqf-x4hg

OOP CMS BLOG 1.0 Cross-Site Request Forgery via addUser.php

Priority HIGH 70

OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious POST requests.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00181 Published 2026-03-06 No fix listed CWE-352
Open these records in search →