GHSA-MX25-J3RC-6W2W Admidio's CSRF in registration `send_login` mode resets arbitrary user passwords

Summary modules/registration.php mode sendlogin regenerates a random password for useruuidassigned, stores its bcrypt hash in admusers.usrpassword, and emails the cleartext to that user. Every other state-changing mode in the same file assignmember, assignuser, deleteuser, createuser calls...

Incorrect Authorization

Overview admidio/admidio is a free open source user management system for websites of organizations and groups. Affected versions of this package are vulnerable to Incorrect Authorization through insufficient authorization checks in the modules/categories.php process. An attacker can delete,...

Missing Authorization

Overview admidio/admidio is a free open source user management system for websites of organizations and groups. Affected versions of this package are vulnerable to Missing Authorization in the filedelete process. An attacker can permanently delete files from folders where they only have view acce...

GHSA-QC4C-HRMC-4F78 Admidio: Authorization bypass in file_delete enables cross-folder file removal by authenticated users without delete privileges

Summary An authenticated Admidio member with upload rights on any one folder can permanently delete files from folders where they have only view access. The authorization check at the top of modules/documents-files.php evaluates upload rights against the attacker-supplied folderuuid URL parameter...

Admidio: Authorization bypass in file_delete enables cross-folder file removal by authenticated users without delete privileges

Summary An authenticated Admidio member with upload rights on any one folder can permanently delete files from folders where they have only view access. The authorization check at the top of modules/documents-files.php evaluates upload rights against the attacker-supplied folderuuid URL parameter...

PT-2026-45044

Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.10 Description When debug logging is enabled, the application logs sensitive credentials in cleartext. Specifically, the Session::setCookie function logs full cookie values and the Session::start function logs the...

CVE-2018-25370

Admidio 3.3.5 contains a cross-site request forgery vulnerability that allows low-privilege users to increase their permissions by exploiting improper origin checking. Attackers can craft malicious HTML forms targeting rolesfunction.php with parameters like rolassignroles, rolapproveusers, and...

CVE-2018-25370

Admidio 3.3.5 contains a cross-site request forgery vulnerability that allows low-privilege users to increase their permissions by exploiting improper origin checking. Attackers can craft malicious HTML forms targeting rolesfunction.php with parameters like rolassignroles, rolapproveusers, and...

CVE-2018-25370 Admidio 3.3.5 Cross-Site Request Forgery via roles_function.php

Admidio 3.3.5 contains a cross-site request forgery vulnerability that allows low-privilege users to increase their permissions by exploiting improper origin checking. Attackers can craft malicious HTML forms targeting rolesfunction.php with parameters like rolassignroles, rolapproveusers, and...

CVE-2018-25370 Admidio 3.3.5 Cross-Site Request Forgery via roles_function.php

Admidio 3.3.5 contains a cross-site request forgery vulnerability that allows low-privilege users to increase their permissions by exploiting improper origin checking. Attackers can craft malicious HTML forms targeting rolesfunction.php with parameters like rolassignroles, rolapproveusers, and...

CVE-2018-25370

CVE-2018-25370 affects Admidio 3.3.5. A cross-site request forgery vulnerability allows low-privilege users to increase permissions by exploiting improper origin checking in roles_function.php. Attacks can craft malicious HTML forms targeting parameters such as rol_assign_roles, rol_approve_users...

CVE-2026-47227

creationtimestamp| type| source ---|---|--- 2026-05-25 08:46:45+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-rwjr-qjj3-mq2f...

CVE-2026-47228

creationtimestamp| type| source ---|---|--- 2026-05-25 08:46:30+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-mx25-j3rc-6w2w...

CVE-2026-47229

creationtimestamp| type| source ---|---|--- 2026-05-25 08:46:17+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-xg76-5qj2-2hhv 2026-08-12 15:22:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gnnizcejqbpge...

CVE-2026-47230

creationtimestamp| type| source ---|---|--- 2026-05-25 08:45:49+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-q6w3-hpfv-rg36 2026-08-12 15:40:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6e3gk3aqb777g...

CVE-2026-47233

creationtimestamp| type| source ---|---|--- 2026-05-25 08:45:34+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-xw54-c3mx-9pm3...

CVE-2026-47226

creationtimestamp| type| source ---|---|--- 2026-05-25 08:44:09+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-qc4c-hrmc-4f78...

PT-2026-43222

Admidio 3.3.5 contains a cross-site request forgery vulnerability that allows low-privilege users to increase their permissions by exploiting improper origin checking. Attackers can craft malicious HTML forms targeting roles function.php with parameters like rol assign roles, rol approve users, a...

Admidio 跨站请求伪造漏洞

Admidio is an open source member management system from the Admidio team. The system supports member lists, event management, guestbooks, photo albums, and downloads. A cross-site request forgery vulnerability exists in Admidio version 3.3.5, which stems from cross-site request forgery and could...

CVE-2026-42194

Admidio is an open-source user management solution. Prior to version 5.0.9, the incomplete SSRF fix in Admidio's fetchmetadata.php validates the resolved IP address but passes the original hostname-based URL to curlinit, leaving a DNS rebinding TOCTOU window that allows redirecting requests to...