Product
admidio
32 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2026-34384
CVE-2026-34383
CVE-2026-34382
CVE-2026-34381
CVE-2026-32817
CVE-2026-32813
CVE-2026-32812
CVE-2026-32757
CVE-2026-32756
CVE-2026-32818
CVE-2026-32816
CVE-2026-32755
CVE-2026-30927
CVE-2025-62617
CVE-2024-47836
CVE-2024-38529
CVE-2024-37906
CVE-2023-47380
CVE-2023-4190
CVE-2023-3692
CVE-2023-3304
CVE-2023-3303
CVE-2023-3302
CVE-2023-3109
CVE-2022-23896
CVE-2022-0991
CVE-2021-43810
CVE-2021-32630
CVE-2020-11004
CVE-2017-8382
CVE-2017-6492
CVE-2008-5209
< 5.0.8
Admidio is an open-source user management solution. Prior to version 5.0.8, the create_user, assign_member, and assign_user action
< 5.0.8
Admidio is an open-source user management solution. Prior to version 5.0.8, the inventory module's item_save endpoint accepts a us
>= 5.0.0 and < 5.0.8
Admidio is an open-source user management solution. From version 5.0.0 to before version 5.0.8, the delete mode handler in mylist_
>= 5.0.0 and < 5.0.8
Admidio is an open-source user management solution. From version 5.0.0 to before version 5.0.8, Admidio relies on adm_my_files/.ht
>= 5.0.0 and < 5.0.7
Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, the documents and files module does not verif
< 5.0.7
Admidio is an open-source user management solution. Versions 5.0.6 and below are vulnerable to arbitrary SQL Injection through the
>= 5.0.0 and < 5.0.7
Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, unrestricted URL fetch in the SSO Metadata AP
< 5.0.7
Admidio is an open-source user management solution. In versions 5.0.6 and below, the eCard send handler uses a raw $_POST['ecard_m
< 5.0.7
Admidio is an open-source user management solution. Versions 5.0.6 and below contain a critical unrestricted file upload vulnerabi
>= 5.0.0 and < 5.0.7
Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, the forum module in Admidio does not verify w
>= 5.0.0 and < 5.0.7
Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, the delete, activate, and deactivate modes in
< 5.0.7
Admidio is an open-source user management solution. In versions 5.0.6 and below, the save_membership action in modules/profile/pro
< 5.0.6
Admidio is an open-source user management solution. Prior to 5.0.6, in modules/events/events_function.php, the event participation
< 4.3.17
Admidio is an open-source user management solution. Prior to version 4.3.17, an authenticated SQL injection vulnerability exists i
< 4.3.12
Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any un
< 4.3.10
Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.10,
< 4.3.9
Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.9, t
all versions
Admidio v4.2.12 and below is vulnerable to Cross Site Scripting (XSS).
< 4.2.11
Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11.
< 4.2.10
Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10.
< 4.2.9
Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9.
< 4.2.9
Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9.
< 4.2.9
Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9.
< 4.2.8
Cross-site Scripting (XSS) - Stored in GitHub repository admidio/admidio prior to 4.2.8.
< 4.1.3
Admidio 4.1.2 version is affected by stored cross-site scripting (XSS).
< 4.1.9
Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9.
< 4.0.12
Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerabilit
< 4.0.4
Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.0.4, t
< 3.3.13
SQL Injection was discovered in Admidio before version 3.3.13. The main cookie parameter is concatenated into a SQL query without
all versions
admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user accounts.
all versions
SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5. The POST parameter dat_cat_id is co
all versions
Directory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote attackers to read arbitrary file