{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/admidio--5.0.12/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:admidio:admidio:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-82655"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Admidio (\u003c 5.0.12)"],"_cs_severities":["high"],"_cs_tags":["web-application","sql-injection","cve","information-disclosure","authorization-bypass"],"_cs_type":"advisory","_cs_vendors":["Admidio"],"content_html":"\u003cp\u003eAdmidio versions prior to 5.0.12 contain a blind SQL injection vulnerability in the relation_type_list parameter of the lists_show.php file. This vulnerability allows unauthenticated attackers to execute arbitrary SQL queries against the underlying database. By supplying a dummy UUID in the role_list parameter, an attacker can bypass standard authentication checks and manipulate the relation_type_list parameter to perform time-based or boolean-based SQL injection. This vector provides a mechanism for unauthorized actors to exfiltrate sensitive data, including user credentials and password hashes stored in the application database.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability allows an unauthenticated attacker to extract the entire contents of the Admidio database. This poses a significant risk to the confidentiality of organizational data, as the exposure of user password hashes and credentials can facilitate further unauthorized access or account takeover across the environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Admidio to version 5.0.12 or later immediately to patch the vulnerable lists_show.php file.\u003c/li\u003e\n\u003cli\u003eReview web server access logs for anomalous requests containing SQL keywords or character sequences (e.g., SLEEP, UNION, SELECT) targeting the lists_show.php endpoint.\u003c/li\u003e\n\u003cli\u003eImplement a Web Application Firewall (WAF) rule to block or sanitize input containing common SQL injection payloads targeted at the relation_type_list parameter.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-08-30T17:12:08Z","date_published":"2026-08-30T17:11:58Z","id":"https://feed.craftedsignal.io/briefs/2026-08-admidio-sql-injection/","summary":"Admidio versions prior to 5.0.12 contain a blind SQL injection vulnerability in the relation_type_list parameter, allowing unauthenticated attackers to exfiltrate database contents.","title":"Unauthenticated Blind SQL Injection in Admidio","url":"https://feed.craftedsignal.io/briefs/2026-08-admidio-sql-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - Admidio (\u003c 5.0.12)","version":"https://jsonfeed.org/version/1.1"}