Product
Admidio versions prior to 5.0.12 contain a blind SQL injection vulnerability in the relation_type_list parameter, allowing unauthenticated attackers to exfiltrate database contents.