The vulnerability in the `ecard_send.php` script of the Admidio membership and access control application allows a perpetrator to execute arbitrary code and gain access to read, modify, or delete data.

The vulnerability in the ecardsend.php script /admprogram/modules/ecards/ecardsend.php of the Admidio membership and access control application relates to the improper elimination of special elements used in SQL queries when processing the ecardrecipients parameter. Exploiting this vulnerability...

CVE-2024-37906: Improper Neutralization of Special Elements used in an SQL Command

Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.9, there is an SQL Injection in the /admprogram/modules/ecards/ecardsend.php source file of the Admidio Application. The SQL Injection results in a compromise of the...