What’s Vulnerable › Vulnerabilities

CVE-2018-25187: Tina4 Stack 1.0.3 SQL Injection and Database File Download

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-03-06 · updated 2026-06-17
• Weakness: CWE-89

Description

Tina4 Stack 1.0.3 contains multiple vulnerabilities allowing unauthenticated attackers to access sensitive database files and execute SQL injection attacks. Attackers can directly request the kim.db database file to retrieve user credentials and password hashes, or inject SQL code through the menu endpoint to manipulate database queries.

Affected products

• Tina4 Stack: 1.0.3

References

• https://www.exploit-db.com/exploits/45833
• https://www.vulncheck.com/advisories/tina-stack-sql-injection-and-database-file-download

Get alerted when CVE-2018-25187 or the next vulnerability affects your stack