Media
CVE-2026-34384
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 50
Restablecer filtros
Media
CVE-2026-34382
Admidio has Missing CSRF Protections on Custom List Deletion in mylist_function.php
Alta
CVE-2026-34381
Admidio allows Unauthenticated Access to Role-Restricted documents via neutralized .htaccess
Alta
CVE-2026-32813
Admidio has a Second-Order SQL Injection via List Configuration (lsc_special_field, lsc_sort, lsc_filter)
Media
CVE-2026-32818
Admidio is Missing Authorization on Forum Topic and Post Deletion
Media
CVE-2026-32757
Admidio has an HTMLPurifier Bypass in eCard Message Allows HTML Email Injection
Crítica
CVE-2026-32817
Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion
Media
CVE-2026-32812
Admidio Vulnerable to SSRF and Local File Read via Unrestricted URL Fetch in SSO Metadata Endpoint
Media
CVE-2026-32755
Admidio is Missing CSRF Protection on Role Membership Date Changes
Media
CVE-2026-32816
Admidio is Missing CSRF Validation on Role Delete, Activate, and Deactivate Actions
Alta
CVE-2026-32756
File Upload(RCE) Vulnerability in admidio
Media
CVE-2026-30927
Admidio: Event participation IDOR - non-leaders can register other users for events via user_uuid parameter
Alta
CVE-2025-62617
Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality
Baja
CVE-2024-47836
Admidio Vulnerable to HTML Injection In The Messages Section
Crítica
CVE-2024-38529
Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
Crítica
CVE-2024-37906
Admidio has Blind SQL Injection in ecard_send.php
Media
CVE-2023-47380
Cross-site Scripting in Admidio
Media
CVE-2023-4190
Admidio Insufficient Session Expiration vulnerability
Media
CVE-2023-3692
Admidio vulnerable to Unrestricted Upload of File with Dangerous Type
Alta
CVE-2023-3302
Admidio Improper Neutralization of Formula Elements in a CSV File vulnerability
Media
CVE-2023-3304
Admidio Improper Access Control vulnerability
Baja
CVE-2023-3303
Admidio Improper Access Control vulnerability
Media
CVE-2023-3109
Admidio vulnerable to Cross-site Scripting
Media
CVE-2022-23896
Cross-site Scripting in admidio
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.