What is CVE-2018-25200?

CVE-2018-25200 is a medium-severity vulnerability in Tomalofficial Php Oop Cms Blog, classified under Cross-Site Request Forgery (CSRF). CVSS score: 5.3/10. Published 2026-03-06.

How severe is CVE-2018-25200?

Medium severity. CVSS v3 base score is 5.3 out of 10.

CSRF in Tomalofficial Php Oop Cms Blog

CVE-2018-25200

OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious POST requests. Attackers can submit forms to the addUser.php endpoint with parameters including userName, password, email, and role set to administrative privileges to gain unauthorized access.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.002 (5.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Tomalofficial Php_oop_cms_blog — versions 1.0
Zsoft Oop Cms Blog — versions 1.0

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

disclosure@vulncheck.com (Exploit, VDB Entry, Third Party Advisory, exploit)
disclosure@vulncheck.com (Broken Link, third-party-advisory)

Frequently asked questions

What is CVE-2018-25200?: CVE-2018-25200 is a medium-severity vulnerability in Tomalofficial Php Oop Cms Blog, classified under Cross-Site Request Forgery (CSRF). CVSS score: 5.3/10. Published 2026-03-06.
How severe is CVE-2018-25200?: Medium severity. CVSS v3 base score is 5.3 out of 10.