Advisories · Technology
admidio.
Every CVE that names admidio among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.php
- admidio
- CWE-602
- CVSS 6.9 Medium
Admidio before 5.0.16 Information Disclosure via rss/links.php Weblinks Feed
- admidio
- Broken access control
- CVSS 7.1 High
Admidio 5.0.11 before 5.0.16 Broken Access Control via inventory_data.php
- admidio
- Broken access control
- CVSS 5.3 Medium
Admidio 5.0.0 before 5.0.16 Authorization Bypass via pdfl Mode in lists_show.php
- admidio
- Broken access control
- CVSS 7.1 High
Admidio 5.0.0 before 5.0.16 IDOR via Forum Topic Update
- admidio
- Broken access control
- CVSS 8.5 High
Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 Cross-Organization Access Control Bypass via members_assignment.php
- admidio
- Broken access control
- CVSS 5.3 Medium
Admidio 5.0.0 before 5.0.15 Unauthenticated Stored XSS via Registration Name
- admidio
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 Reflected XSS via system/redirect.php
- admidio
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Admidio before 5.0.12 Broken Access Control via profile_function.php
- admidio
- Broken access control
- CVSS 8.7 High
Admidio before 5.0.12 Authentication Bypass via RSS feeds
- admidio
- Information disclosure
- CVSS 2.1 Low
Admidio before 5.0.12 Path Traversal via Photo ZIP Download
- admidio
- Path traversal
- CVSS 8.7 High
Admidio before 5.0.12 SQL Injection via relation_type_list
- admidio
- SQL injection
- CVSS 5.3 Medium
Admidio before 5.0.11 IDOR via save_temporary mylist_function.php
- admidio
- Broken access control
- CVSS 7.1 High
Admidio before 5.0.11 CSRF via category-report preferences
- admidio
- Cross-site request forgery (CSRF)
- CVSS 6.9 Medium
Admidio before 5.0.11 Reflected XSS via SSO/SAML Endpoint
- admidio
- Cross-site scripting (XSS)
- CVSS 8.7 High
Admidio before 5.0.11 Authentication Bypass via forum.php
- admidio
- Authentication bypass
- CVSS 6.9 Medium
Admidio before 5.0.11 Cross-Organization Role Modification
- admidio
- Broken access control
- CVSS 6.9 Medium
Admidio 3.3.5 Cross-Site Request Forgery via roles_function.php
- Admidio
- Cross-site request forgery (CSRF)
- CVSS 8.8 High
Cross-site Scripting (XSS) when redirect an url
- admidio
- Cross-site scripting (XSS)
- CVSS 9.6 CriticalCritical · CVSS 9+
Various
- admidio
- Unrestricted file upload
- CVSS 7.7 High
SQL Injection in Admidio
- admidio
- SQL injection