CVE-2023-26569 — Unauthenticated SQL Injection In IDAttend’s IDWeb Application

CVE-2023-26569

Unauthenticated SQL Injection In IDAttend’s IDWeb Application PUBLISHED

Description (CNA)

Unauthenticated SQL injection in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

Affected (CNA)

Vendor / product	Versions
IDAttend Pty Ltd / IDWeb	affected 0 through 3.1.052

CWE

CWE-89

References

https://www.themissinglink.com.au/security-advisories/cve-2023-26569

ADP enrichment

CVE

No English description supplied.

https://www.themissinglink.com.au/security-advisories/cve-2023-26569

CISA-ADP

No English description supplied.

No references supplied.