PT-2023-20734

Name of the Vulnerable Software and Affected Versions IDWeb application versions 3.1.052 and earlier Description Unauthenticated SQL injection in the StudentPopupDetails Timetable method allows extraction or modification of all data by unauthenticated attackers. Recommendations For versions 3.1.0...

IDAttend IDWeb SQL Injection Vulnerability

IDAttend IDWeb is a web-based module from IDAttend, Inc. A security vulnerability exists in IDAttend IDWeb version 3.1.052 and prior versions, which stems from an unauthenticated SQL injection in the StudentPopupDetailsTimetable method...