CVE-2023-26582

Unauthenticated SQL injection in the GetExcursionDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...

CVE-2023-26582

CVE-2023-26582 affects IDAttend’s IDWeb application. The issue is an unauthenticated SQL injection in the GetExcursionDetails method, enabling attackers to extract or modify data. Affected are IDWeb versions 3.1.052 and earlier. The vulnerability is described across multiple sources (e.g., NVD/Re...