Vulnerability index

Browse CVEs

27 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Admidio HIGH 7.5
CVE-2026-34381

Admidio is an open-source user management solution. From version 5.0.0 to before version 5.0.8, Admidio relies on adm_my_files/.htaccess to deny dire…

Fix: 5.0.8+
Fix from $1,950 2026-03-31
Admidio HIGH 7.3
CVE-2026-34384

Admidio is an open-source user management solution. Prior to version 5.0.8, the create_user, assign_member, and assign_user action modes in modules/r…

Fix: 5.0.8+
Fix from $1,950 2026-03-31
Admidio CRITICAL 9.1
CVE-2026-32817

Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, the documents and files module does not verify whether the curre…

Fix: 5.0.7+
Fix from $2,300 2026-03-20
Admidio HIGH 8.0
CVE-2026-32813

Admidio is an open-source user management solution. Versions 5.0.6 and below are vulnerable to arbitrary SQL Injection through the MyList configurati…

Fix: 5.0.7+
Fix from $1,950 2026-03-20
Admidio MEDIUM 6.8
CVE-2026-32812

Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, unrestricted URL fetch in the SSO Metadata API can result in SSR…

Fix: 5.0.7+
Fix from $1,600 2026-03-20
Admidio HIGH 8.8
CVE-2026-32756

Admidio is an open-source user management solution. Versions 5.0.6 and below contain a critical unrestricted file upload vulnerability in the Documen…

Fix: 5.0.7+
Fix from $1,950 2026-03-20
Admidio MEDIUM 5.4
CVE-2026-32757

Admidio is an open-source user management solution. In versions 5.0.6 and below, the eCard send handler uses a raw $_POST['ecard_message'] value inst…

Fix: 5.0.7+
Fix from $1,600 2026-03-20
Admidio MEDIUM 6.5
CVE-2026-32818

Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, the forum module in Admidio does not verify whether the current …

Fix: 5.0.7+
Fix from $1,600 2026-03-19
Admidio MEDIUM 5.7
CVE-2026-32755

Admidio is an open-source user management solution. In versions 5.0.6 and below, the save_membership action in modules/profile/profile_function.php s…

Fix: 5.0.7+
Fix from $1,600 2026-03-19
Admidio MEDIUM 5.7
CVE-2026-32816

Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, the delete, activate, and deactivate modes in modules/groups-rol…

Fix: 5.0.7+
Fix from $1,600 2026-03-19
Admidio MEDIUM 5.4
CVE-2026-30927

Admidio is an open-source user management solution. Prior to 5.0.6, in modules/events/events_function.php, the event participation logic allows any u…

Fix: 5.0.6+
Fix from $1,600 2026-03-10
Admidio HIGH 7.2
CVE-2025-62617

Admidio is an open-source user management solution. Prior to version 4.3.17, an authenticated SQL injection vulnerability exists in the member assign…

Fix: 4.3.17+
Fix from $1,950 2025-10-22
Admidio HIGH 8.8
CVE-2024-37906

Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.9, there is an SQL Inje…

Fix: 4.3.9+
Fix from $1,950 2024-07-29
Admidio HIGH 8.8
CVE-2024-38529

Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.10, there is a Remote C…

Fix: 4.3.10+
Fix from $1,950 2024-07-29
Admidio MEDIUM 6.1
CVE-2023-47380

Admidio v4.2.12 and below is vulnerable to Cross Site Scripting (XSS).

Patch available
Fix from $1,600 2023-11-22
Admidio MEDIUM 6.5
CVE-2023-4190

Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11.

Fix: 4.2.11+
Fix from $1,600 2023-08-06
Admidio HIGH 7.2
CVE-2023-3692

Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10.

Fix: 4.2.10+
Fix from $1,950 2023-07-16
Admidio HIGH 7.8
CVE-2023-3302

Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9.

Fix: 4.2.9+
Fix from $1,950 2023-06-23
Admidio MEDIUM 5.4
CVE-2023-3304

Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9.

Fix: 4.2.9+
Fix from $1,600 2023-06-23
Admidio MEDIUM 5.4
CVE-2023-3109

Cross-site Scripting (XSS) - Stored in GitHub repository admidio/admidio prior to 4.2.8.

Fix: 4.2.8+
Fix from $1,600 2023-06-05
Admidio MEDIUM 5.4
CVE-2022-23896

Admidio 4.1.2 version is affected by stored cross-site scripting (XSS).

Fix: 4.1.3+
Fix from $1,600 2022-06-28
Admidio HIGH 7.1
CVE-2022-0991

Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9.

Fix: 4.1.9+
Fix from $1,950 2022-03-19
Admidio MEDIUM 6.1
CVE-2021-43810EPSS 6%

Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Adm…

Fix: 4.0.12+
Fix from $1,600 2021-12-07
Admidio HIGH 8.8
CVE-2021-32630

Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.0.4, there is an authenti…

Fix: 4.0.4+
Fix from $1,950 2021-05-20
Admidio HIGH 7.5
CVE-2020-11004

SQL Injection was discovered in Admidio before version 3.3.13. The main cookie parameter is concatenated into a SQL query without any input validatio…

Fix: 3.3.13+
Fix from $1,950 2020-04-24
Admidio HIGH 7.2
CVE-2017-6492

SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5. The POST parameter dat_cat_id is concatenated into a S…

No fix yet
Fix from $1,950 2017-03-05
Admidio MEDIUM 5.0
CVE-2008-5209

Directory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote attackers to read arbitrary files via a .. (dot dot…

Patch available
Fix from $1,600 2008-11-24