VYPR

Admidio

by Admidio

Source repositories

CVEs (61)

  • CVE-2020-11004HigApr 24, 2020
    risk 0.00cvss 7.7epss 0.01

    SQL Injection was discovered in Admidio before version 3.3.13. The main cookie parameter is concatenated into a SQL query without any input validation/sanitization, thus an attacker without logging in, can send a GET request with arbitrary SQL queries appended to the cookie…

Page 4 of 4