Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...

CVE-2023-3109 Cross-site Scripting (XSS) - Stored in admidio/admidio

Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...

Admidio 4.2.5 CSV Injection

Exploit Title: admidio v4.2.5 - CSV Injection Application: admidio Version: 4.2.5 Bugs: CSV Injection Technology: PHP Vendor URL: https://www.admidio.org/ Software Link: https://www.admidio.org/download.php Date of found: 26.04.2023 Author: Mirabbas Ağalarov Tested on: Windows 2. Technical Detail...

admidio v4.2.5 - CSV Injection Vulnerability

Exploit Title: admidio v4.2.5 - CSV Injection Application: admidio Version: 4.2.5 Bugs: CSV Injection Technology: PHP Vendor URL: https://www.admidio.org/ Software Link: https://www.admidio.org/download.php Date of found: 26.04.2023 Author: Mirabbas Ağalarov Tested on: Windows 2. Technical Detail...

admidio v4.2.5 - CSV Injection

Exploit Title: admidio v4.2.5 - CSV Injection Application: admidio Version: 4.2.5 Bugs: CSV Injection Technology: PHP Vendor URL: https://www.admidio.org/ Software Link: https://www.admidio.org/download.php Date of found: 26.04.2023 Author: Mirabbas Ağalarov Tested on: Windows 2. Technical Detail...

Admidio Cross-Site Scripting Vulnerability

Admidio is an open source member management system from the Admidio team. The system supports member lists, event management, guestbooks, photo albums and downloads. A cross-site scripting vulnerability exists in Admidio version 4.1.2, which stems from the program's lack of checksum filtering of...

GHSA-QR6M-F3GV-8678 Cross-site Scripting in admidio

Admidio 4.1.2 version is affected by stored cross-site scripting XSS...

Cross-site Scripting in admidio

Admidio 4.1.2 version is affected by stored cross-site scripting XSS...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Admidio 4.1.2 version is affected by stored cross-site scripting XSS...

CVE-2022-23896

Admidio 4.1.2 version is affected by stored cross-site scripting XSS...

CVE-2022-23896

Admidio 4.1.2 version is affected by stored cross-site scripting XSS...

Cross site scripting

Admidio 4.1.2 version is affected by stored cross-site scripting XSS...

CVE-2022-23896

Admidio 4.1.2 version is affected by stored cross-site scripting XSS...

CVE-2022-23896

Admidio 4.1.2 version is affected by stored cross-site scripting XSS...

CVE-2022-23896

CVE-2022-23896 affects Admidio 4.1.2 with a stored cross-site scripting (XSS) vulnerability. Connected sources indicate the root cause is a lack of checksum filtering of user-supplied data and output, enabling an attacker to execute JavaScript on the client side. Concrete exploit details (vectors...

Admidio 跨站脚本漏洞

Admidio is an open source member management system from the Admidio team. The system supports member lists, event management, guestbooks, photo albums and downloads. A cross-site scripting vulnerability exists in Admidio version 4.1.2, which stems from the program's lack of checksum filtering of...

admidio CSRF Vulnerability

admidio 3.2.8 has CSRF in admprogram/modules/members/membersfunction.php with an impact of deleting arbitrary user accounts...

GHSA-C4V8-2HG8-JV77 admidio CSRF Vulnerability

admidio 3.2.8 has CSRF in admprogram/modules/members/membersfunction.php with an impact of deleting arbitrary user accounts...

Insufficient Session Expiration

admidio/admidio is vulnerable to insecure session management. The vulnerability exists due to insufficient sanitization in session expiration in the refreshAutoLogin function in the Session.php file leading to user account compromise...

GHSA-MF79-F657-47WW Insufficient Session Expiration in Admidio

Admidio prior to version 4.1.9 is vulnerable to insufficient session expiration. In vulnerable versions, changing the password in one session does not terminate sessions logged in with the old password, which could lead to unauthorized actors maintaining access to an account...