Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-4748. PoCs published by Stefan Schurtz.
AI-analyzed exploit summary The exploit demonstrates SQL injection and XSS vulnerabilities in Admidio 2.3.5 by providing direct URLs with crafted parameters. The SQLi is triggered via the 'active_role' parameter, while the XSS is executed through the 'headline' parameter.
Description
Admidio 2.3.5 - Multiple Vulnerabilities
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Stefan Schurtz · textwebappsphp
https://www.exploit-db.com/exploits/21005
The exploit demonstrates SQL injection and XSS vulnerabilities in Admidio 2.3.5 by providing direct URLs with crafted parameters. The SQLi is triggered via the 'active_role' parameter, while the XSS is executed through the 'headline' parameter.
Classification
Working Poc 90%
Attack Type
Sqli | Xss
Complexity
Trivial
Reliability
Reliable
Target:
Admidio 2.3.5
No auth needed
Prerequisites:
Access to the target application
MITRE ATT&CK
mistral-large-3 · analyzed May 19, 2026
Full analysis →
Details
Status
draft
Tracked Since
May 05, 2026