CVE-2024-37906
1 advisory.
Packagist/admidio/admidio CVE-2024-37906: critical 9.9, EPSS 0.93%
Admidio has Blind SQL Injection in ecard_send.php
Action: Upgrade admidio/admidio to 4.3.9 or later.
composer require admidio/admidio:4.3.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.9 | - |
Fixed versions
| 4.3.9 |
Sources
- osv: GHSA-69wx-xc6j-28v3
- https://github.com/Admidio/admidio/security/advisories/GHSA-69wx-xc6j-28v3
- https://nvd.nist.gov/vuln/detail/CVE-2024-37906
- https://github.com/Admidio/admidio/commit/3ff02b0c64a6911ab3e81cd61077f392c0b25248
- https://github.com/Admidio/admidio
CVE-2024-37906 · published · modified · JSON