CVE-2017-6492

The CVE-2017-6492 entry concerns Admidio 3.2.5, where a SQL Injection vulnerability exists in adm_program/modules/dates/dates_function.php. The POST parameter dat_cat_id is directly concatenated into a SQL query without input validation or sanitization, enabling potential attacker-controlled quer...

CVE-2017-6492

SQL Injection was discovered in admprogram/modules/dates/datesfunction.php in Admidio 3.2.5. The POST parameter datcatid is concatenated into a SQL query without any input validation/sanitization...

admidio 2.3.5 - Multiple Vulnerabilities

No description provided by source. Advisory: Admidio 2.3.5 Multiple security vulnerabilities Advisory ID: SSCHADV2012-019 Author: Stefan Schurtz Affected Software: Successfully tested on Admidio 2.3.5 Vendor URL: http://www.admidio.org/ Vendor Status: fixed ========================== Vulnerabilit...

Admidio 2.3.5 Multiple security vulnerabilities

Advisory: Admidio 2.3.5 Multiple security vulnerabilities Advisory ID: SSCHADV2012-019 Author: Stefan Schurtz Affected Software: Successfully tested on Admidio 2.3.5 Vendor URL: http://www.admidio.org/ Vendor Status: fixed ========================== Vulnerability Description...

Admidio 2.3.5 multiple defects and repair-vulnerability warning-the black bar safety net

Title Admidio 2.3.5 Multiple security vulnerabilities Author Stefan Schurtz Affected Software: Successfully tested on Admidio 2.3.5 Developer website: http://www.admidio.org/ Status: has been fixed Defect summary Admidio 2.3.5-containing XSS and SQLi flaws ================== Test //SQLi...

Admidio 2.3.5 - Multiple Vulnerabilities

Admidio 2.3.5 - Multiple Vulnerabilities Advisory: Admidio 2.3.5 Multiple security vulnerabilities Advisory ID: SSCHADV2012-019 Author: Stefan Schurtz Affected Software: Successfully tested on Admidio 2.3.5 Vendor URL: http://www.admidio.org/ Vendor Status: fixed ==========================...

Admidio 2.3.5 Multiple security vulnerabilities

Exploit for php platform in category web applications Advisory: Admidio 2.3.5 Multiple security vulnerabilities Author: Stefan Schurtz Affected Software: Successfully tested on Admidio 2.3.5 Vendor URL: http://www.admidio.org/ Vendor Status: fixed ========================== Vulnerability...

Admidio 2.3.5 - Multiple Vulnerabilities

Advisory: Admidio 2.3.5 Multiple security vulnerabilities Advisory ID: SSCHADV2012-019 Author: Stefan Schurtz Affected Software: Successfully tested on Admidio 2.3.5 Vendor URL: http://www.admidio.org/ Vendor Status: fixed ========================== Vulnerability Description...

Admidio 2.3.5 Cross Site Scripting / SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Admidio 2.3.5 Multiple security vulnerabilities Advisory ID: SSCHADV2012-019 Author: Stefan Schurtz Affected Software: Successfully tested on Admidio 2.3.5 Vendor URL: http://www.admidio.org/ Vendor Status: fixed ==========================...

Admidio get_file.php Remote File Disclosure Vulnerability

Admidio is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5209

Directory traversal vulnerability in modules/download/getfile.php in Admidio 1.4.8 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

Directory traversal

Directory traversal vulnerability in modules/download/getfile.php in Admidio 1.4.8 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2008-5209

Directory traversal vulnerability in modules/download/getfile.php in Admidio 1.4.8 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2008-5209

Admidio 1.4.8 is affected by CVE-2008-5209. The vulnerability is in modules/download/get_file.php and is caused by a directory traversal via .. in the file parameter, enabling remote reading of arbitrary files. Multiple connected sources (NVD entry, OpenVAS NASL, and CVE records) confirm the issu...

admidio-disclose.txt

/---------------------------------------------------------------\ + + + Admidio 1.4.8 Remote File Disclosure + + + ---------------------------------------------------------------/ Author : n3v3rh00d, http://forum.antichat.ru Download : http://prdownloads.sourceforge.net/admidio/admidio-1.4.8.zip...

Admidio 1.4.8 - getfile.php Remote File Disclosure

Admidio 1.4.8 - getfile.php Remote File Disclosure /---------------------------------------------------------------\ + + + Admidio 1.4.8 Remote File Disclosure + + + ---------------------------------------------------------------/ Author : n3v3rh00d, http://forum.antichat.ru Download :...

Admidio 1.4.8 (getfile.php) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================ Admidio 1.4.8 getfile.php Remote File Disclosure Vulnerability ================================================================...

Admidio 1.4.8 (getfile.php) Remote File Disclosure Vulnerability

No description provided by source. /---------------------------------------------------------------\ + + + Admidio 1.4.8 Remote File Disclosure + + + ---------------------------------------------------------------/ Author : n3v3rh00d, http://forum.antichat.ru Download :...

Admidio 1.4.8 - 'getfile.php' Remote File Disclosure

/---------------------------------------------------------------\ + + + Admidio 1.4.8 Remote File Disclosure + + + ---------------------------------------------------------------/ Author : n3v3rh00d, http://forum.antichat.ru Download : http://prdownloads.sourceforge.net/admidio/admidio-1.4.8.zip...