Skip to content
OpenAdvisories

Product · Tina4

Tina4 Stack

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2018-25186

    Tina4 Stack 1.0.3 Cross-Site Request Forgery via profile

    Tina4 Stack 1.0.3 contains a cross-site request forgery vulnerability that allows attackers to modify admin user credentials by submitting forged POST requests to the profile endpoint. Attackers can craft HTML forms targeting the /kim/profile endpoint with hi…

    Tina4 Tina4 Stack