CVE-2023-26582

CVE-2023-26582 affects IDAttend’s IDWeb application. The issue is an unauthenticated SQL injection in the GetExcursionDetails method, enabling attackers to extract or modify data. Affected are IDWeb versions 3.1.052 and earlier. The vulnerability is described across multiple sources (e.g., NVD/Re...

CVE-2023-26582: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL injection in the GetExcursionDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...

IDAttend IDWeb SQL Injection Vulnerability

IDAttend IDWeb is a web-based module from IDAttend, Inc. A security vulnerability exists in IDAttend IDWeb version 3.1.052 and prior versions that stems from an unauthenticated SQL injection in the GetExcursionDetails method...