CVE-2018-25200 OOP CMS BLOG 1.0 Cross-Site Request Forgery via addUser.php
Unauthenticated attackers can create administrative accounts via CSRF in OOP CMS BLOG, leading to full system compromise.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-25200?
CVE-2018-25200 is a medium-severity vulnerability in Zsoft OOP CMS BLOG, published on 6 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious POST requests. Attackers can submit forms to the addUser.php endpoint with parameters including userName, password, email, and role set to administrative privileges to gain unauthorized access.
Weakness: CWE-352
Which versions are affected by CVE-2018-25200?
It affects 1 product.
Products include Tomalofficial Php Oop Cms Blog.
How do I fix CVE-2018-25200?
No fix has been published for CVE-2018-25200 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-25200 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-25200 exists.
Other vulnerabilities in Zsoft OOP CMS BLOG
Sources
Also known as GHSA-qxvj-wxqf-x4hg.