172 matches found
CVE-2026-111916
Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omits the categoryview role-visibility filter. Attackers can request the weblinks RSS feed for an organization to retrieve link names...
CVE-2026-111916
Admidio versions prior to 5.0.16 are susceptible to an information disclosure vulnerability within the rss/links.php component. The root cause is the omission of the category_view role-visibility filter, which allows unauthenticated attackers to bypass role restrictions. By requesting the organiz...
CVE-2026-111916 Admidio before 5.0.16 Information Disclosure via rss/links.php Weblinks Feed
Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omits the categoryview role-visibility filter. Attackers can request the weblinks RSS feed for an organization to retrieve link names...
EUVD-2026-103305
Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omits the categoryview role-visibility filter. Attackers can request the weblinks RSS feed for an organization to retrieve link names...
CVE-2026-111916 Admidio before 5.0.16 Information Disclosure via rss/links.php Weblinks Feed
Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omits the categoryview role-visibility filter. Attackers can request the weblinks RSS feed for an organization to retrieve link names...
CVE-2026-111916: Missing Authorization
Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omits the categoryview role-visibility filter. Attackers can request the weblinks RSS feed for an organization to retrieve link names...
CVE-2023-45653
Cross-Site Request Forgery CSRF vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin = 6.0 versions...
CVE-2022-42485
Auth. contributor+ Cross-Site Scripting XSS vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin = 6.0 versions...
CVE-2006-3263
SQL injection vulnerability in the Weblinks module weblinks.php in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
EUVD-2004-2011
Malware in sbrugna...
EUVD-2014-8430
Malware in sbrugna...
EUVD-2010-4902
Malware in sbrugna...
EUVD-2006-3260
Malware in sbrugna...
EUVD-2008-3073
Malware in sbrugna...
EUVD-2006-7224
Malware in sbrugna...
EUVD-2007-0389
Malware in sbrugna...
EUVD-2014-8597
Malware in sbrugna...
EUVD-2025-31267
Malicious code in bioql PyPI...