CVE-2023-26583

Unauthenticated SQL injection in the GetCurrentPeriod method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...

CVE-2023-26583

The CVE-2023-26583 entry concerns an unauthenticated SQL injection in the GetCurrentPeriod method of IDAttend’s IDWeb application (versions ≤ 3.1.052). The vulnerability allows an attacker to extract or modify all data without authentication, as described across multiple sources. The documents do...