Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Tina4 Component: Tina4 Stack Clear all filters
TI-2018-15412 CVE-2018-25187 · GHSA-69cw-9g25-672r

Tina4 Stack 1.0.3 SQL Injection and Database File Download

Priority HIGH 77

Tina4 Stack 1.0.3 contains multiple vulnerabilities allowing unauthenticated attackers to access sensitive database files and execute SQL injection attacks.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00394 Published 2026-03-06 No fix listed CWE-89
TI-2018-15411 CVE-2018-25186 · GHSA-53q7-qj3f-vj3q

Tina4 Stack 1.0.3 Cross-Site Request Forgery via profile

Priority MEDIUM 64

Tina4 Stack 1.0.3 contains a cross-site request forgery vulnerability that allows attackers to modify admin user credentials by submitting forged POST requests to the profile endpoint.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00159 Published 2026-03-06 No fix listed CWE-352