669 matches found
CVE-2023-47380
CVE-2023-47380 affects Admidio v4.2.12 and earlier; the vulnerability is Cross-Site Scripting (XSS) due to insufficient input sanitization. Impact per sources is client-side script execution within user sessions. Amitigated/fixed by Admidio in v4.2.13 release notes. Exploitation details are not p...
Admidio Security Breach
Admidio is an open source member management system from the Admidio team. The system supports member lists, event management, guestbooks, photo albums and downloads. A security vulnerability exists in Admidio v4.2.12 and earlier versions, which stems from vulnerability to cross-site scripting XSS...
CVE-2023-47380
Admidio v4.2.12 and below is vulnerable to Cross Site Scripting XSS...
CVE-2023-47380
Admidio v4.2.12 and below is vulnerable to Cross Site Scripting XSS...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Admidio v4.2.12 and below is vulnerable to Cross Site Scripting XSS...
The vulnerability of the Admidio membership management and access control application lies in its incorrect session duration, which allows attackers to gain access to confidential information and arbitrary functions of the application.
The vulnerability of the Admidio membership management and access control application is related to an incorrect session duration. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to confidential information and arbitrary functions of the application...
Insufficient Session Expiration
admidio/admidio is vulnerable to Insufficient Session Expiration. The vulnerability exists due to the user cache in Session.php which allows a user to use an access token to login even when its invalid...
Admidio Insufficient Session Expiration vulnerability
Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11. This vulnerability allows a user's session to remain valid even after the user has logged out, potentially granting unauthorized access to sensitive areas and functionalities...
GHSA-QQ8M-9RPX-W2FM Admidio Insufficient Session Expiration vulnerability
Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11. This vulnerability allows a user's session to remain valid even after the user has logged out, potentially granting unauthorized access to sensitive areas and functionalities...
CVE-2023-4190
Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11...
CVE-2023-4190
CVE-2023-4190 affects admidio/admidio prior to version 4.2.11. The vulnerability is Insufficient Session Expiration, allowing a user session to remain valid after logout and potentially grant unauthorized access to sensitive areas. Remediation: upgrade to Admidio 4.2.11 or later to fix the issue....
CVE-2023-4190 Insufficient Session Expiration in admidio/admidio
Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11...
CVE-2023-4190 Insufficient Session Expiration in admidio/admidio
Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11...
CVE-2023-4190 Insufficient Session Expiration in admidio/admidio
Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11...
Insufficient Session Expiration
Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11...
Admidio Code Issue Vulnerability
Admidio is an open source member management system from the Admidio team. The system supports member lists, event management, guestbooks, photo albums and downloads. A code issue vulnerability exists in versions prior to Admidio 4.2.11, which stems from a lack of cache checking, resulting in an...
Arbitrary File Upload
admidio/admidio is vulnerable to Arbitrary File Upload. The vulnerability exists because the library does not properly validate the image file uploaded, allowing an attacker to bypass the file upload restrictions and upload a malicious file or embedded JavaScript file into the system, leading to...
Admidio 4.2.10 Remote Code Execution
Exploit Title: Admidio v4.2.10 - Remote Code Execution RCE Application: Admidio Version: 4.2.10 Bugs: RCE Technology: PHP Vendor URL: https://www.admidio.org/ Software Link: https://www.admidio.org/download.php Date of found: 10.07.2023 Author: Mirabbas Ağalarov Tested on: Linux 2. Technical...