CVE-2020-11004

SQL Injection was discovered in Admidio before version 3.3.13. The main cookie parameter is concatenated into a SQL query without any input validation/sanitization, thus an attacker without logging in, can send a GET request with arbitrary SQL queries appended to the cookie parameter and execute...

Sql injection

SQL Injection was discovered in Admidio before version 3.3.13. The main cookie parameter is concatenated into a SQL query without any input validation/sanitization, thus an attacker without logging in, can send a GET request with arbitrary SQL queries appended to the cookie parameter and execute...

CVE-2020-11004 SQL Injection in Admidio

SQL Injection was discovered in Admidio before version 3.3.13. The main cookie parameter is concatenated into a SQL query without any input validation/sanitization, thus an attacker without logging in, can send a GET request with arbitrary SQL queries appended to the cookie parameter and execute...

CVE-2020-11004

CVE-2020-11004 affects Admidio prior to 3.3.13. Root cause: the main cookie parameter is concatenated into a SQL query without input validation, enabling an unauthenticated attacker to append arbitrary SQL via a crafted GET request. Impact is confidentiality. Mitigation is patching to version 3.3...

Admidio 3.3.5 Cross Site Request Forgery

Exploit Title: Admidio 3.3.5 - Cross-Site Request Forgery Change Permissions Author: Nawaf Alkeraithe Date: 2018-09-01 Vendor Homepage: https://www.admidio.org/ Software Link: https://sourceforge.net/projects/admidio/files/Admidio/3.3.x/admidio-3.3.5.zip/download Version: 3.3.5 Tested on: PHP CVE...

Admidio 3.3.5 - Cross-Site Request Forgery (Change Permissions)

Admidio 3.3.5 - Cross-Site Request Forgery Change Permissions Exploit Title: Admidio 3.3.5 - Cross-Site Request Forgery Change Permissions Author: Nawaf Alkeraithe Date: 2018-09-01 Vendor Homepage: https://www.admidio.org/ Software Link:...

Admidio 3.3.5 - Cross-Site Request Forgery (Change Permissions) Vulnerability

Exploit for php platform in category web applications Exploit Title: Admidio 3.3.5 - Cross-Site Request Forgery Change Permissions Author: Nawaf Alkeraithe Vendor Homepage: https://www.admidio.org/ Software Link:...

Admidio 3.3.5 - Cross-Site Request Forgery (Change Permissions)

Exploit Title: Admidio 3.3.5 - Cross-Site Request Forgery Change Permissions Author: Nawaf Alkeraithe Date: 2018-09-01 Vendor Homepage: https://www.admidio.org/ Software Link: https://sourceforge.net/projects/admidio/files/Admidio/3.3.x/admidio-3.3.5.zip/download Version: 3.3.5 Tested on: PHP CVE...

Cross site request forgery (csrf)

admidio 3.2.8 has CSRF in admprogram/modules/members/membersfunction.php with an impact of deleting arbitrary user accounts...

CVE-2017-8382

admidio 3.2.8 has CSRF in admprogram/modules/members/membersfunction.php with an impact of deleting arbitrary user accounts...

CVE-2017-8382

admidio 3.2.8 has CSRF in admprogram/modules/members/membersfunction.php with an impact of deleting arbitrary user accounts...

CVE-2017-8382

CVE-2017-8382 affects Admidio 3.2.8 via a Cross-Site Request Forgery in the file adm_program/modules/members/members_function.php, allowing an attacker to delete arbitrary user accounts. The vulnerability is CSRF-based; exploitation relies on a crafted request from an authenticated session (requi...

Admidio Cross-Site Request Forgery Vulnerability (CNVD-2017-10374)

Admidio is a free online membership management system for associations, groups and organizations. The system offers features such as user management, adding and updating homepages, and installing and adjusting modules on it. A cross-site request forgery vulnerability exists in Admidio. The...

Admidio 3.2.8 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title :Admidio 3.2.8 CSRF to Delete Users Date: 28/April/2017 Exploit Author: Faiz Ahmed Zaidi Organization: Provensec LLC Website: http://provensec.com/ Vendor Homepage: https://www.admidio.org/ Software Link:...

Admidio 3.2.8 Cross Site Request Forgery

Exploit Title :Admidio 3.2.8 CSRF to Delete Users Date: 28/April/2017 Exploit Author: Faiz Ahmed Zaidi Organization: Provensec LLC Website: http://provensec.com/ Vendor Homepage: https://www.admidio.org/ Software Link: https://www.admidio.org/download.php Version: 3.2.8 Tested on: Windows 10 Xamp...

Admidio 3.2.8 - Cross-Site Request Forgery

Admidio 3.2.8 - Cross-Site Request Forgery Exploit Title :Admidio 3.2.8 CSRF to Delete Users Date: 28/April/2017 Exploit Author: Faiz Ahmed Zaidi Organization: Provensec LLC Website: http://provensec.com/ Vendor Homepage: https://www.admidio.org/ Software Link: https://www.admidio.org/download.ph...

Admidio 3.2.8 - Cross-Site Request Forgery

Exploit Title :Admidio 3.2.8 CSRF to Delete Users Date: 28/April/2017 Exploit Author: Faiz Ahmed Zaidi Organization: Provensec LLC Website: http://provensec.com/ Vendor Homepage: https://www.admidio.org/ Software Link: https://www.admidio.org/download.php Version: 3.2.8 Tested on: Windows 10 Xamp...

CVE-2017-6492

SQL Injection was discovered in admprogram/modules/dates/datesfunction.php in Admidio 3.2.5. The POST parameter datcatid is concatenated into a SQL query without any input validation/sanitization...

CVE-2017-6492

SQL Injection was discovered in admprogram/modules/dates/datesfunction.php in Admidio 3.2.5. The POST parameter datcatid is concatenated into a SQL query without any input validation/sanitization...

Sql injection

SQL Injection was discovered in admprogram/modules/dates/datesfunction.php in Admidio 3.2.5. The POST parameter datcatid is concatenated into a SQL query without any input validation/sanitization...