admidio CSRF Vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2017-8382 · ADVISORY
• Admidio/admidio · WEB
• Admidio/admidio#1074 · WEB
• Admidio/admidio commit a7ac9d3 · WEB
• Admidio/admidio · PACKAGE
• faizzaidi/Admidio-3.2.8-CSRF-POC-by-Provensec-llc · WEB
• exploit-db.com/exploits/42005 · WEB
• en.0day.today/exploit/27771 · WEB
• exploit-db.com/exploits/42005 · Exploit

admidio/admidio のその他の脆弱性

• CVE-2026-53760中 5.2Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugins.php endpoint handles plugin installati…
• CVE-2026-47234中 4.4Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, `Session::setCookie()` logs full…
• CVE-2026-47233中 6.5Admidio is an open-source user management solution. Version 5.0.9 added a missing `isAdministratorInventory()` gate to `case 'item_delete':`…
• CVE-2026-47232中 4.3Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive `mode=export` action in `modules/sso/keys.php` ex…
• CVE-2026-47231高 8.1Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` gates state-changing modes by che…