2 matches found
Sql injection
Unauthenticated SQL injection in the GetRoomChanges method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...
6.4CVSS9.6AI score0.00759EPSS
SaveExploits0References1Affected Software1
CVE-2023-27254: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL injection in the GetRoomChanges method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...
9.8CVSS8.2AI score0.00759EPSS
SaveExploits0References3
20