Skip to contentAdmidio vulnerabilities
Newest
- admidioAdmidio is Missing CSRF Protection on Role Membership Date ChangesCVE-2026-32755Fix available5.7 Medium
- admidioAdmidio has Missing CSRF Validation on Role Delete, Activate, and Deactivate ActionsCVE-2026-32816Fix available5.7 Medium
- admidioAdmidio: Unrestricted File Upload via CSRF Token Validation Bypass in Documents & Files ModuleCVE-2026-32756Fix available8.8 High
- admidioAdmidio: Event participation IDOR - non-leaders can register other users for events via user_uuid parameterCVE-2026-30927Fix available5.3 Medium
- admidioAdmidio Vulnerable to Authenticated SQL Injection in Member Assignment FunctionalityCVE-2025-62617Fix available7.2 High
- admidioAdmidio vulnerable to HTML Injection In The Messages SectionCVE-2024-47836Fix available3.5 Low
- admidioAdmidio Vulnerable to RCE via Arbitrary File Upload in Message AttachmentCVE-2024-38529Fix available9.1 Critical
- admidioAdmidio has Blind SQL Injection in ecard_send.phpCVE-2024-37906Fix available10.0 Critical
- admidioCross-site Scripting in AdmidioCVE-2023-47380Fix available6.1 Medium
- admidio, admidio admidio/admidio +1 moreInsufficient Session Expiration in admidio/admidioCVE-2023-4190Fix available6.5 Medium
- admidio, admidio admidio/admidio +1 moreUnrestricted Upload of File with Dangerous Type in admidio/admidioCVE-2023-3692Fix available6.7 Medium
- admidio, admidio admidio/admidio +1 moreImproper Access Control in admidio/admidioCVE-2023-3304Fix available5.9 Medium
- admidio, admidio admidio/admidio +1 moreImproper Access Control in admidio/admidioCVE-2023-3303Fix available6.4 Medium
- admidio, admidio admidio/admidio +1 moreImproper Neutralization of Formula Elements in a CSV File in admidio/admidioCVE-2023-3302Fix available6.6 Medium
- admidio, admidio admidio/admidio +1 moreCross-site Scripting (XSS) - Stored in admidio/admidioCVE-2023-3109Fix available6.3 Medium
- admidioCross-site Scripting in admidioCVE-2022-23896Fix available5.4 Medium
- admidio, admidio admidio/admidio +1 moreInsufficient Session Expiration in admidio/admidioCVE-2022-0991Fix available8.2 High
- admidioCross-site Scripting (XSS) when redirect an urlCVE-2021-438108.8 High
- admidioVariousCVE-2021-326309.6 Critical
- admidioSQL Injection in AdmidioCVE-2020-110047.7 High
- admidioadmidio CSRF VulnerabilityCVE-2017-8382Public exploitFix available4.5 Medium
- admidioSQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5....CVE-2017-64927.2 High
- admidioDirectory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote...CVE-2008-5209Public exploit5.0 Medium