admidio kayıtları

admidio üreticisine ait 32 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %93,8
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

32 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
36İzleyin	CVE-2026-32817İstismar yok	Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletionadmidio · admidio · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR) CSRF	Kritik9,1	—	%0,5	19 Mar 2026
35İzleyin	CVE-2021-32630İstismar yok	Admidio is a free, open source user management system for websites of organizations and groups.admidio · admidio · CWE-434 RCE Dosya yükleme	Yüksek8,8	—	%1,6	20 May 2021
35İzleyin	CVE-2024-38529İstismar yok	Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachmentadmidio · admidio · CWE-434 RCE Dosya yükleme	Yüksek8,8	—	%1,2	29 Tem 2024
35İzleyin	CVE-2026-32756İstismar yok	Admidio: Unrestricted File Upload via CSRF Token Validation Bypass in Documents & Files Moduleadmidio · admidio · CWE-434 RCE Dosya yükleme CSRF	Yüksek8,8	—	%1,0	19 Mar 2026
35İzleyin	CVE-2024-37906İstismar yok	Admidio has Blind SQL Injection in ecard_send.phpadmidio · admidio · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,9	29 Tem 2024
32İzleyin	CVE-2026-32813İstismar yok	Admidio: Second-Order SQL Injection via List Configuration (lsc_special_field, lsc_sort, lsc_filter)admidio · admidio · CWE-89 SQL enjeksiyonu	Yüksek8,0	—	%0,4	19 Mar 2026
31İzleyin	CVE-2023-3302İstismar yok	Improper Neutralization of Formula Elements in a CSV File in admidio/admidioadmidio · admidio · CWE-1236	Yüksek7,8	—	%0,5	23 Haz 2023
30İzleyin	CVE-2020-11004İstismar yok	SQL Injection in Admidioadmidio · admidio · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek7,5	—	%1,5	24 Nis 2020
30İzleyin	CVE-2026-34381İstismar yok	Admidio: Unauthenticated Access to Role-Restricted documents via neutralized .htaccessadmidio · admidio · CWE-284 Kimlik doğrulamasız Kimlik doğrulama atlatma Erişim denetimi (IDOR)	Yüksek7,5	—	%0,5	31 Mar 2026
29İzleyin	CVE-2026-34384İstismar yok	Admidio: Missing CSRF Protection on Registration Approval Actionsadmidio · admidio · CWE-352 CSRF	Yüksek7,3	—	%0,2	31 Mar 2026
28İzleyin	CVE-2017-6492İstismar yok	SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5.admidio · admidio · CWE-89 SQL enjeksiyonu	Yüksek7,2	—	%1,4	5 Mar 2017
28İzleyin	CVE-2022-0991İstismar yok	Insufficient Session Expiration in admidio/admidioadmidio · admidio · CWE-613	Yüksek7,1	—	%1,0	19 Mar 2022
28İzleyin	CVE-2023-3692İstismar yok	Unrestricted Upload of File with Dangerous Type in admidio/admidioadmidio · admidio · CWE-434 Dosya yükleme	Yüksek7,2	—	%1,0	15 Tem 2023
28İzleyin	CVE-2025-62617İstismar yok	Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionalityadmidio · admidio · CWE-89 RCE SQL enjeksiyonu	Yüksek7,2	—	%0,4	22 Eki 2025
27İzleyin	CVE-2026-32812İstismar yok	Admidio Vulnerable to SSRF and Local File Read via Unrestricted URL Fetch in SSO Metadata Endpointadmidio · admidio · CWE-918 SSRF	Orta6,8	—	%0,5	19 Mar 2026
26İzleyin	CVE-2023-4190İstismar yok	Insufficient Session Expiration in admidio/admidioadmidio · admidio · CWE-613 Kimlik doğrulamasız	Orta6,5	—	%0,6	5 Ağu 2023
26İzleyin	CVE-2026-32818İstismar yok	Admidio is Missing Authorization on Forum Topic and Post Deletionadmidio · admidio · CWE-862 Erişim denetimi (IDOR) CSRF	Orta6,5	—	%0,3	19 Mar 2026
25İzleyin	CVE-2021-43810Kavram kanıtı	Cross-site Scripting (XSS) when redirect an urladmidio · admidio · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%5,0	7 Ara 2021
24İzleyin	CVE-2023-47380İstismar yok	Admidio v4.2.12 and below is vulnerable to Cross Site Scripting (XSS).admidio · admidio · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,7	22 Kas 2023
22İzleyin	CVE-2026-32816İstismar yok	Admidio has Missing CSRF Validation on Role Delete, Activate, and Deactivate Actionsadmidio · admidio · CWE-352 CSRF	Orta5,7	—	%0,2	19 Mar 2026
22İzleyin	CVE-2026-32755İstismar yok	Admidio is Missing CSRF Protection on Role Membership Date Changesadmidio · admidio · CWE-352 CSRF	Orta5,7	—	%0,2	19 Mar 2026
21İzleyin	CVE-2008-5209Kavram kanıtı	Directory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote attackers to read arbitrary files via a ..admidio · admidio · CWE-22 Kimlik doğrulamasız Yol geçişi	Orta5,0	—	%2,8	24 Kas 2008
21İzleyin	CVE-2022-23896İstismar yok	Admidio 4.1.2 version is affected by stored cross-site scripting (XSS).admidio · admidio · CWE-79 XSS	Orta5,4	—	%0,6	28 Haz 2022
21İzleyin	CVE-2023-3109İstismar yok	Cross-site Scripting (XSS) - Stored in admidio/admidioadmidio · admidio · CWE-79 XSS	Orta5,4	—	%0,5	5 Haz 2023
21İzleyin	CVE-2023-3304İstismar yok	Improper Access Control in admidio/admidioadmidio · admidio · CWE-284 Erişim denetimi (IDOR)	Orta5,4	—	%0,4	23 Haz 2023

CVE-2026-32817
36İzleyin
Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
- CSRF
admidio · admidio19 Mar 2026
CVE-2021-32630
35İzleyin
Admidio is a free, open source user management system for websites of organizations and groups.
YüksekCVSS 8,8İstismar yokEPSS %2
- RCE
- Dosya yükleme
admidio · admidio20 May 2021
CVE-2024-38529
35İzleyin
Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Dosya yükleme
admidio · admidio29 Tem 2024
CVE-2026-32756
35İzleyin
Admidio: Unrestricted File Upload via CSRF Token Validation Bypass in Documents & Files Module
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Dosya yükleme
- CSRF
admidio · admidio19 Mar 2026
CVE-2024-37906
35İzleyin
Admidio has Blind SQL Injection in ecard_send.php
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
admidio · admidio29 Tem 2024
CVE-2026-32813
32İzleyin
Admidio: Second-Order SQL Injection via List Configuration (lsc_special_field, lsc_sort, lsc_filter)
YüksekCVSS 8,0İstismar yokEPSS %0
- SQL enjeksiyonu
admidio · admidio19 Mar 2026
CVE-2023-3302
31İzleyin
Improper Neutralization of Formula Elements in a CSV File in admidio/admidio
YüksekCVSS 7,8İstismar yokEPSS %0
admidio · admidio23 Haz 2023
CVE-2020-11004
30İzleyin
SQL Injection in Admidio
YüksekCVSS 7,5İstismar yokEPSS %2
- Kimlik doğrulamasız
- SQL enjeksiyonu
admidio · admidio24 Nis 2020
CVE-2026-34381
30İzleyin
Admidio: Unauthenticated Access to Role-Restricted documents via neutralized .htaccess
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- Erişim denetimi (IDOR)
admidio · admidio31 Mar 2026
CVE-2026-34384
29İzleyin
Admidio: Missing CSRF Protection on Registration Approval Actions
YüksekCVSS 7,3İstismar yokEPSS %0
- CSRF
admidio · admidio31 Mar 2026
CVE-2017-6492
28İzleyin
SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5.
YüksekCVSS 7,2İstismar yokEPSS %1
- SQL enjeksiyonu
admidio · admidio5 Mar 2017
CVE-2022-0991
28İzleyin
Insufficient Session Expiration in admidio/admidio
YüksekCVSS 7,1İstismar yokEPSS %1
admidio · admidio19 Mar 2022
CVE-2023-3692
28İzleyin
Unrestricted Upload of File with Dangerous Type in admidio/admidio
YüksekCVSS 7,2İstismar yokEPSS %1
- Dosya yükleme
admidio · admidio15 Tem 2023
CVE-2025-62617
28İzleyin
Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality
YüksekCVSS 7,2İstismar yokEPSS %0
- RCE
- SQL enjeksiyonu
admidio · admidio22 Eki 2025
CVE-2026-32812
27İzleyin
Admidio Vulnerable to SSRF and Local File Read via Unrestricted URL Fetch in SSO Metadata Endpoint
OrtaCVSS 6,8İstismar yokEPSS %0
- SSRF
admidio · admidio19 Mar 2026
CVE-2023-4190
26İzleyin
Insufficient Session Expiration in admidio/admidio
OrtaCVSS 6,5İstismar yokEPSS %1
- Kimlik doğrulamasız
admidio · admidio5 Ağu 2023
CVE-2026-32818
26İzleyin
Admidio is Missing Authorization on Forum Topic and Post Deletion
OrtaCVSS 6,5İstismar yokEPSS %0
- Erişim denetimi (IDOR)
- CSRF
admidio · admidio19 Mar 2026
CVE-2021-43810
25İzleyin
Cross-site Scripting (XSS) when redirect an url
OrtaCVSS 6,1Kavram kanıtıEPSS %5
- Kimlik doğrulamasız
- XSS
admidio · admidio7 Ara 2021
CVE-2023-47380
24İzleyin
Admidio v4.2.12 and below is vulnerable to Cross Site Scripting (XSS).
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
admidio · admidio22 Kas 2023
CVE-2026-32816
22İzleyin
Admidio has Missing CSRF Validation on Role Delete, Activate, and Deactivate Actions
OrtaCVSS 5,7İstismar yokEPSS %0
- CSRF
admidio · admidio19 Mar 2026
CVE-2026-32755
22İzleyin
Admidio is Missing CSRF Protection on Role Membership Date Changes
OrtaCVSS 5,7İstismar yokEPSS %0
- CSRF
admidio · admidio19 Mar 2026
CVE-2008-5209
21İzleyin
Directory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote attackers to read arbitrary files via a ..
OrtaCVSS 5,0Kavram kanıtıEPSS %3
- Kimlik doğrulamasız
- Yol geçişi
admidio · admidio24 Kas 2008
CVE-2022-23896
21İzleyin
Admidio 4.1.2 version is affected by stored cross-site scripting (XSS).
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
admidio · admidio28 Haz 2022
CVE-2023-3109
21İzleyin
Cross-site Scripting (XSS) - Stored in admidio/admidio
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
admidio · admidio5 Haz 2023
CVE-2023-3304
21İzleyin
Improper Access Control in admidio/admidio
OrtaCVSS 5,4İstismar yokEPSS %0
- Erişim denetimi (IDOR)
admidio · admidio23 Haz 2023