Admidio: Unrestricted File Upload via CSRF Token Validation Bypass in Documents & Files Module

Admidio is a free, open source user management system for websites of organizations and groups

Admidio is a free, open source user management system for websites of organizations and groups

Admidio is a free, open source user management system for websites of organizations and groups

Admidio: SAML Response Sent to Unvalidated Assertion Consumer Service URL from AuthnRequest

Admidio: SAML Signature Validation Result Ignored — Forged AuthnRequests and LogoutRequests Processed

Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders

Admidio: Second-Order SQL Injection via List Configuration (lsc_special_field, lsc_sort, lsc_filter)

Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9

Admidio before 5.0.12 Authentication Bypass via RSS feeds

Admidio before 5.0.12 SQL Injection via relation_type_list

Admidio before 5.0.11 Authentication Bypass via forum.php

Admidio: Unauthenticated Access to Role-Restricted documents via neutralized .htaccess

SQL Injection was discovered in Admidio before version 3.3.13

Admidio: Missing CSRF Protection on Registration Approval Actions

Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality

Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10

SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5

Admidio: Inverted 2FA Reset Authorization Check Lets Group Leaders Strip Admin TOTP

Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9