CVE-2023-3302

CVE-2023-3302 affects the open‑source Admidio member management system. The vulnerability is in the CSV handling of admidio/admidio prior to 4.2.9, caused by improper neutralization of formula elements in CSV files, which can lead to formula injection when CSV data is processed. Impact is describ...

CVE-2023-3303

Vulnerability CVE-2023-3303 affects admidio/admidio prior to 4.2.9 due to Improper Access Control. Public documents consistently describe an access-control weakness without detailing exploit methods. CVSS data indicate low confidentiality impact with no integrity/availability impact, and network ...

CVE-2023-3302 Improper Neutralization of Formula Elements in a CSV File in admidio/admidio

Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9...

CVE-2023-3304 Improper Access Control in admidio/admidio

Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9...

Improper Neutralization of Formula Elements in a CSV File

Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9...

Improper Access Control

Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9...

CVE-2023-3302 Improper Neutralization of Formula Elements in a CSV File in admidio/admidio

Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9...

CVE-2023-3303 Improper Access Control in admidio/admidio

Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9...

CVE-2023-3303 Improper Access Control in admidio/admidio

Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9...

Admidio 访问控制错误漏洞

Admidio is an open source member management system from the Admidio team. The system supports member lists, event management, guestbooks, photo albums, and downloads. An Access Control Error vulnerability exists in Admidio versions prior to 4.2.9 that stems from incorrect access control...

CVE-2023-3304

CVE-2023-3304 affects admidio/admidio prior to 4.2.9 and is described as an Improper Access Control vulnerability. Public records from NVD/Red Hat/GHSA indicate network-exposed impact with low confidentiality/integrity impact (CVSS v3.1 base 5.4; MEDIUM) and confirm the root cause as improper acc...

Admidio Improper Access Control vulnerability

Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9...

Cross site scripting in Admidio 4.2.9 via headline parameter

Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. Proof...

GHSA-GX4R-FVWG-8678 Admidio vulnerable to Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...

Admidio vulnerable to Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...

CVE-2023-3109

Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...

CVE-2023-3109

Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...

CVE-2023-3109 Cross-site Scripting (XSS) - Stored in admidio/admidio

Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...

CVE-2023-3109

CVE-2023-3109 is a stored Cross-site Scripting (XSS) flaw in admidio/admidio prior to version 4.2.8. The vulnerability allows injected scripts to execute in affected users’ browsers when rendering vulnerable pages. Remediation is to upgrade to 4.2.8 or later (patched in the public advisories). If...