Cross-site Scripting in admidio

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-23896 · ADVISORY
• admidio/admidio commit 1ff30f7 · WEB
• Admidio/admidio · PACKAGE
• huntr.dev/bounties/79c2d16c-bae2-417f-ab50-10c52707a30f · WEB
• huntr.dev/bounties/79c2d16c-bae2-417f-ab50-10c52707a30f · Exploit

Lỗ hổng khác của admidio/admidio

• CVE-2026-53760TRUNG BÌNH 5.2Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugins.php endpoint handles plugin installati…
• CVE-2026-47234TRUNG BÌNH 4.4Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, `Session::setCookie()` logs full…
• CVE-2026-47233TRUNG BÌNH 6.5Admidio is an open-source user management solution. Version 5.0.9 added a missing `isAdministratorInventory()` gate to `case 'item_delete':`…
• CVE-2026-47232TRUNG BÌNH 4.3Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive `mode=export` action in `modules/sso/keys.php` ex…
• CVE-2026-47231CAO 8.1Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` gates state-changing modes by che…