Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-53760
  • github.com/admidio/admidio
 Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET Requests 04 Sep
  • Fix available
  • Severity - 5.2 (Medium)
CVE-2026-82658
  • github.com/admidio/admidio
 Admidio before 5.0.12 Broken Access Control via profile_function.php 30 Aug
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-82657
  • github.com/admidio/admidio
 Admidio before 5.0.12 Authentication Bypass via RSS feeds 30 Aug
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-82656
  • github.com/admidio/admidio
 Admidio before 5.0.12 Path Traversal via Photo ZIP Download 30 Aug
  • Fix available
  • Severity - 2.1 (Low)
CVE-2026-82655
  • github.com/admidio/admidio
 Admidio before 5.0.12 SQL Injection via relation_type_list 30 Aug
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-47234
  • github.com/admidio/admidio
 Admidio writes session IDs and auto-login cookie values to application logs 12 Aug
  • Fix available
  • Severity - 4.4 (Medium)
CVE-2026-47233
  • github.com/admidio/admidio
 Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #2024 12 Aug
  • Fix available
  • Severity - 6.5 (Medium)
CVE-2026-47232
  • github.com/admidio/admidio
 Admidio PKCS#12 private key export action lacks CSRF protection 12 Aug
  • Fix available
  • Severity - 4.3 (Medium)
CVE-2026-47231
  • github.com/admidio/admidio
 Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders 12 Aug
  • Fix available
  • Severity - 8.1 (High)
CVE-2026-47230
  • github.com/admidio/admidio
 Admidio: IDOR in documents-files.php allows cross-folder file rename and description changes by unauthorized uploaders 12 Aug
  • Fix available
  • Severity - 6.5 (Medium)
CVE-2026-47229
  • github.com/admidio/admidio
 Admidio: CSRF in SSO client `enable` action toggles SAML/OIDC clients without token validation 12 Aug
  • Fix available
  • Severity - 5.4 (Medium)
CVE-2026-47228
  • github.com/admidio/admidio
 Admidio's CSRF in registration `send_login` mode resets arbitrary user passwords 12 Aug
  • Fix available
  • Severity - 5.2 (Medium)
CVE-2026-47227
  • github.com/admidio/admidio
 Admidio module-administrator can delete or reorder categories owned by other modules via dead authorization check in `modules/categories.php` 12 Aug
  • Fix available
  • Severity - 6.5 (Medium)
CVE-2026-47226
  • github.com/admidio/admidio
 Admidio: Authorization bypass in file_delete enables cross-folder file removal by authenticated users without delete privileges 12 Aug
  • Fix available
  • Severity - 6.5 (Medium)
CVE-2026-69094
  • github.com/admidio/admidio
 Admidio before 5.0.11 IDOR via save_temporary mylist_function.php 03 Aug
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-69093
  • github.com/admidio/admidio
 Admidio before 5.0.11 CSRF via category-report preferences 03 Aug
  • Fix available
  • Severity - 7.1 (High)
Load more...