TI-2018-15525 CVE-2018-25300 · GHSA-8w85-j87r-r3qmXATABoost CMS 1.0.0 SQL Injection via news.phpPriority HIGH 77XATABoost CMS 1.0.0 contains a union-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the id parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00323 · Published 2026-04-29 · No fix listed CWE-89