Skip to content
OpenAdvisories

Product · IDAttend Pty

IDWeb

30 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-27262

    Unauthenticated SQL Injection In IDAttend’s IDWeb Application

    Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

    IDAttend Pty IDWeb
  • Critical 9.8
    CVE-2023-27260

    Unauthenticated SQL Injection In IDAttend’s IDWeb Application

    Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

    IDAttend Pty IDWeb
  • Critical 9.8
    CVE-2023-27255

    Unauthenticated SQL Injection In IDAttend’s IDWeb Application

    Unauthenticated SQL injection in the DeleteRoomChanges method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

    IDAttend Pty IDWeb
  • Critical 9.8
    CVE-2023-27254

    Unauthenticated SQL Injection In IDAttend’s IDWeb Application

    Unauthenticated SQL injection in the GetRoomChanges method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

    IDAttend Pty IDWeb
  • Critical 9.8
    CVE-2023-26584

    Unauthenticated SQL Injection In IDAttend’s IDWeb Application

    Unauthenticated SQL injection in the GetStudentInconsistencies method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

    IDAttend Pty IDWeb
  • Critical 9.8
    CVE-2023-26583

    Unauthenticated SQL Injection In IDAttend’s IDWeb Application

    Unauthenticated SQL injection in the GetCurrentPeriod method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

    IDAttend Pty IDWeb
  • Critical 9.8
    CVE-2023-26582

    Unauthenticated SQL Injection In IDAttend’s IDWeb Application

    Unauthenticated SQL injection in the GetExcursionDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

    IDAttend Pty IDWeb
  • Critical 9.8
    CVE-2023-26581

    Unauthenticated SQL Injection In IDAttend’s IDWeb Application

    Unauthenticated SQL injection in the GetVisitors method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

    IDAttend Pty IDWeb
  • Critical 9.8
    CVE-2023-26572

    Unauthenticated SQL Injection In IDAttend’s IDWeb Application

    Unauthenticated SQL injection in the GetExcursionList method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

    IDAttend Pty IDWeb
  • Critical 9.8
    CVE-2023-26569

    Unauthenticated SQL Injection In IDAttend’s IDWeb Application

    Unauthenticated SQL injection in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

    IDAttend Pty IDWeb
  • Critical 9.8
    CVE-2023-26568

    Unauthenticated SQL Injection In IDAttend’s IDWeb Application

    Unauthenticated SQL injection in the GetStudentGroupStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

    IDAttend Pty IDWeb