669 matches found
CVE-2023-3304
CVE-2023-3304 affects admidio/admidio prior to 4.2.9 and is described as an Improper Access Control vulnerability. Public records from NVD/Red Hat/GHSA indicate network-exposed impact with low confidentiality/integrity impact (CVSS v3.1 base 5.4; MEDIUM) and confirm the root cause as improper acc...
CVE-2023-3304 Improper Access Control in admidio/admidio
Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9...
Cross site scripting in Admidio 4.2.9 via headline parameter
Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. Proof...
GHSA-GX4R-FVWG-8678 Admidio vulnerable to Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...
Admidio vulnerable to Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...
CVE-2023-3109
Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...
CVE-2023-3109
Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...
CVE-2023-3109
CVE-2023-3109 is a stored Cross-site Scripting (XSS) flaw in admidio/admidio prior to version 4.2.8. The vulnerability allows injected scripts to execute in affected users’ browsers when rendering vulnerable pages. Remediation is to upgrade to 4.2.8 or later (patched in the public advisories). If...
Admidio 跨站脚本漏洞
Admidio is an open source member management system from the Admidio team. The system supports member lists, event management, guestbooks, photo albums and downloads. A cross-site scripting vulnerability exists in versions prior to Admidio 4.2.8. An attacker exploited the vulnerability to execute ...
CVE-2023-3109 Cross-site Scripting (XSS) - Stored in admidio/admidio
Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...
CVE-2023-3109 Cross-site Scripting (XSS) - Stored in admidio/admidio
Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...
Admidio 4.2.5 CSV Injection
Exploit Title: admidio v4.2.5 - CSV Injection Application: admidio Version: 4.2.5 Bugs: CSV Injection Technology: PHP Vendor URL: https://www.admidio.org/ Software Link: https://www.admidio.org/download.php Date of found: 26.04.2023 Author: Mirabbas Ağalarov Tested on: Windows 2. Technical Detail...
admidio v4.2.5 - CSV Injection Vulnerability
Exploit Title: admidio v4.2.5 - CSV Injection Application: admidio Version: 4.2.5 Bugs: CSV Injection Technology: PHP Vendor URL: https://www.admidio.org/ Software Link: https://www.admidio.org/download.php Date of found: 26.04.2023 Author: Mirabbas Ağalarov Tested on: Windows 2. Technical Detail...
admidio v4.2.5 - CSV Injection
Exploit Title: admidio v4.2.5 - CSV Injection Application: admidio Version: 4.2.5 Bugs: CSV Injection Technology: PHP Vendor URL: https://www.admidio.org/ Software Link: https://www.admidio.org/download.php Date of found: 26.04.2023 Author: Mirabbas Ağalarov Tested on: Windows 2. Technical Detail...
Admidio Cross-Site Scripting Vulnerability
Admidio is an open source member management system from the Admidio team. The system supports member lists, event management, guestbooks, photo albums and downloads. A cross-site scripting vulnerability exists in Admidio version 4.1.2, which stems from the program's lack of checksum filtering of...
GHSA-QR6M-F3GV-8678 Cross-site Scripting in admidio
Admidio 4.1.2 version is affected by stored cross-site scripting XSS...