Vulnerability index

Browse CVEs

30 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Idweb CRITICAL 9.1
CVE-2023-26581

Unauthenticated SQL injection in the GetVisitors method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all…

Fix: after 3.1.052
Fix from $2,300 2023-10-25
Idweb CRITICAL 9.1
CVE-2023-26582

Unauthenticated SQL injection in the GetExcursionDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modificati…

Fix: after 3.1.052
Fix from $2,300 2023-10-25
Idweb CRITICAL 9.1
CVE-2023-26583

Unauthenticated SQL injection in the GetCurrentPeriod method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification…

Fix: after 3.1.052
Fix from $2,300 2023-10-25
Idweb CRITICAL 9.1
CVE-2023-26584

Unauthenticated SQL injection in the GetStudentInconsistencies method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or mo…

Fix: after 3.1.052
Fix from $2,300 2023-10-25
Idweb CRITICAL 9.1
CVE-2023-27254

Unauthenticated SQL injection in the GetRoomChanges method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification…

Fix: after 3.1.052
Fix from $2,300 2023-10-25
Idweb CRITICAL 9.1
CVE-2023-27255

Unauthenticated SQL injection in the DeleteRoomChanges method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modifica…

Fix: after 3.1.052
Fix from $2,300 2023-10-25
Idweb CRITICAL 9.1
CVE-2023-27260

Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modific…

Fix: after 3.1.052
Fix from $2,300 2023-10-25
Idweb CRITICAL 9.1
CVE-2023-27262

Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modific…

Fix: after 3.1.052
Fix from $2,300 2023-10-25
Idweb HIGH 7.5
CVE-2023-27257

Missing authentication in the GetActiveToiletPasses method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of student informa…

Fix: after 3.1.052
Fix from $1,950 2023-10-25
Idweb HIGH 7.5
CVE-2023-27258

Missing authentication in the GetStudentGroupStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of student and …

Fix: after 3.1.052
Fix from $1,950 2023-10-25
Idweb HIGH 7.5
CVE-2023-27259

Missing authentication in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive studen…

Fix: after 3.1.052
Fix from $1,950 2023-10-25
Idweb HIGH 7.5
CVE-2023-27375

Missing authentication in the StudentPopupDetails_ContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction o…

Fix: after 3.1.052
Fix from $1,950 2023-10-25
Idweb HIGH 7.5
CVE-2023-27376

Missing authentication in the StudentPopupDetails_StudentDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction o…

Fix: after 3.1.052
Fix from $1,950 2023-10-25
Idweb HIGH 7.5
CVE-2023-27377

Missing authentication in the StudentPopupDetails_EmergencyContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows ex…

Fix: after 3.1.052
Fix from $1,950 2023-10-25
Idweb MEDIUM 6.5
CVE-2023-27261

Missing authentication in the DeleteAssignments method in IDAttend’s IDWeb application 3.1.052 and earlier allows deletion of data by unauthe…

Fix: after 3.1.052
Fix from $1,600 2023-10-25
Idweb MEDIUM 5.3
CVE-2023-27256

Missing authentication in the GetLogFiles method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of sensitive log files by una…

Fix: after 3.1.052
Fix from $1,600 2023-10-25
Idweb CRITICAL 9.1
CVE-2023-26568

Unauthenticated SQL injection in the GetStudentGroupStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modifica…

Fix: after 3.1.052
Fix from $2,300 2023-10-25
Idweb CRITICAL 9.1
CVE-2023-26569

Unauthenticated SQL injection in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or mo…

Fix: after 3.1.052
Fix from $2,300 2023-10-25
Idweb CRITICAL 9.1
CVE-2023-26572

Unauthenticated SQL injection in the GetExcursionList method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of…

Fix: after 3.1.052
Fix from $2,300 2023-10-25
Idweb CRITICAL 9.1
CVE-2023-26573

Missing authentication in the SetDB method in IDAttend’s IDWeb application 3.1.052 and earlier allows denial of service or theft of database login cr…

Fix: after 3.1.052
Fix from $2,300 2023-10-25
Idweb HIGH 8.8
CVE-2023-26578

Arbitrary file upload to web root in the IDAttend’s IDWeb application 3.1.013 allows authenticated attackers to upload dangerous files to web root su…

Mitigation only
Fix from $1,950 2023-10-25
Idweb HIGH 7.5
CVE-2023-26570

Missing authentication in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive st…

Fix: after 3.1.052
Fix from $1,950 2023-10-25
Idweb HIGH 7.5
CVE-2023-26571

Missing authentication in the SetStudentNotes method in IDAttend’s IDWeb application 3.1.052 and earlier allows modification of student data by unau…

Fix: after 3.1.052
Fix from $1,950 2023-10-25
Idweb HIGH 7.5
CVE-2023-26574

Missing authentication in the SearchStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by u…

Fix: after 3.1.052
Fix from $1,950 2023-10-25
Idweb HIGH 7.5
CVE-2023-26575

Missing authentication in the SearchStudentsStaff method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student and…

Fix: after 3.1.052
Fix from $1,950 2023-10-25
Idweb HIGH 7.5
CVE-2023-26576

Missing authentication in the SearchStudentsRFID method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student dat…

Fix: after 3.1.052
Fix from $1,950 2023-10-25
Idweb HIGH 7.5
CVE-2023-26580

Unauthenticated arbitrary file read in the IDAttend’s IDWeb application 3.1.013 allows the retrieval of any file present on the web server by unauthe…

Fix: after 3.1.052
Fix from $1,950 2023-10-25
Idweb MEDIUM 5.4
CVE-2023-26577

Stored cross-site scripting in the IDAttend’s IDWeb application 3.1.052 and earlier allows attackers to hijack the browsing session of the logged in …

Fix: after 3.1.052
Fix from $1,600 2023-10-25
Idweb MEDIUM 5.3
CVE-2023-26579

Missing authentication in the DeleteStaff method in IDAttend’s IDWeb application 3.1.013 allows deletion of staff information by unauthenticated atta…

Mitigation only
Fix from $1,600 2023-10-25
Idweb MEDIUM 6.1
CVE-2023-1356

Reflected cross-site scripting in the StudentSearch component in IDAttend’s IDWeb application 3.1.052 and earlier allows hijacking of a user’s browsi…

Fix: 3.1.053+
Fix from $1,600 2023-10-25