admidio

Top products

The 15 most recently published vulnerabilities affecting admidio.

• CVE-2026-47234Admidio writes session IDs and auto-login cookie values to application logs4.4Aug 12, 2026
• CVE-2026-47233Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #20246.5Aug 12, 2026
• CVE-2026-47232Admidio PKCS#12 private key export action lacks CSRF protection4.3Aug 12, 2026
• CVE-2026-47231Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders8.1Aug 12, 2026
• CVE-2026-47230Admidio: IDOR in documents-files.php allows cross-folder file rename and description changes by unauthorized uploaders6.5Aug 12, 2026
• CVE-2026-47229Admidio: CSRF in SSO client `enable` action toggles SAML/OIDC clients without token validation5.4Aug 12, 2026
• CVE-2026-47228Admidio's CSRF in registration `send_login` mode resets arbitrary user passwords5.2Aug 12, 2026
• CVE-2026-47227Admidio module-administrator can delete or reorder categories owned by other modules via dead authorization check in `modules/categories.php`6.5Aug 12, 2026
• CVE-2026-47226Admidio: Authorization bypass in file_delete enables cross-folder file removal by authenticated users without delete privileges6.5Aug 12, 2026
• CVE-2026-69094Admidio before 5.0.11 IDOR via save_temporary mylist_function.php4.3Aug 3, 2026
• CVE-2026-69093Admidio before 5.0.11 CSRF via category-report preferences4.6Aug 3, 2026
• CVE-2026-69092Admidio before 5.0.11 Reflected XSS via SSO/SAML Endpoint6.5Aug 3, 2026
• CVE-2026-69091Admidio before 5.0.11 Authentication Bypass via forum.php7.5Aug 3, 2026
• CVE-2026-69090Admidio before 5.0.11 Cross-Organization Role Modification4.9Aug 3, 2026
• CVE-2018-25370Admidio 3.3.5 Cross-Site Request Forgery via roles_function.php5.3May 25, 2026