Sql injection

2023-10-2518:17:00

PRIOn knowledge base

www.prio-n.com

sql injection

unauthenticated

idattend

idweb application

data extraction

data modification

attackers

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.1%

JSON

Unauthenticated SQL injection in the GetStudentGroupStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

CPENameOperatorVersion
idweble3.1.052

CPE	Name	Operator	Version
	idweb	le	3.1.052

References

www.themissinglink.com.au/security-advisories/cve-2023-26568