EUVD-2023-1822

Malicious code in bioql PyPI...

EUVD-2024-2279

Malicious code in bioql PyPI...

EUVD-2022-6137

Malicious code in bioql PyPI...

EUVD-2022-1477

Malicious code in bioql PyPI...

EUVD-2023-2340

Malicious code in bioql PyPI...

EUVD-2023-3045

Malicious code in bioql PyPI...

EUVD-2022-3509

Malicious code in bioql PyPI...

EUVD-2023-1911

Malicious code in bioql PyPI...

EUVD-2024-2978

Malicious code in bioql PyPI...

EUVD-2023-2123

Malicious code in bioql PyPI...

CVE-2024-47836

Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4.3.12 fixes this issue...

CVE-2024-37906

Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.9, there is an SQL Injection in the /admprogram/modules/ecards/ecardsend.php source file of the Admidio Application. The SQL Injection results in a compromise of the...

CVE-2023-3109

Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...

CVE-2023-3302

Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9...

CVE-2023-3304

Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9...

CVE-2023-47380

Admidio v4.2.12 and below is vulnerable to Cross Site Scripting XSS...

CVE-2021-43810

Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vulnerability occurs because redirect.php does not properly validate the value of the url parameter...

CVE-2021-32630

Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.0.4, there is an authenticated RCE via .phar file upload. A php web shell can be uploaded via the Documents & Files upload feature. Someone with upload permissions could...

CVE-2020-11004

SQL Injection was discovered in Admidio before version 3.3.13. The main cookie parameter is concatenated into a SQL query without any input validation/sanitization, thus an attacker without logging in, can send a GET request with arbitrary SQL queries appended to the cookie parameter and execute...

Unsafe Deserialization

admidio/admidio is vulnerable to an Unsafe Deserialization. The vulnerability is due to improper handling of user input during the deserialization process. Specifically, it occurs when the application does not adequately validate or sanitize serialized data before converting it back into objects...