CVE-2023-26572

Unauthenticated SQL injection in the GetExcursionList method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...

Sql injection

Unauthenticated SQL injection in the GetExcursionList method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...

CVE-2023-26572

CVE-2023-26572: Unauthenticated SQL injection in IDAttend IDWeb’s GetExcursionList method affects v3.1.052 and earlier. Exploitation by unauthenticated attackers can extract or modify all data via a network vector with low complexity, compromising confidentiality and integrity (C/H). No patch det...

CVE-2023-26572: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL injection in the GetExcursionList method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...