Browse CVEs

CRITICAL 9.1 CVE-2023-26581 Unauthenticated SQL injection in the GetVisitors method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all… Idweb after 3.1.052 Fix from $2,3002023-10-25 CRITICAL 9.1 CVE-2023-26582 Unauthenticated SQL injection in the GetExcursionDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modificati… Idweb after 3.1.052 Fix from $2,3002023-10-25 CRITICAL 9.1 CVE-2023-26583 Unauthenticated SQL injection in the GetCurrentPeriod method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification… Idweb after 3.1.052 Fix from $2,3002023-10-25 CRITICAL 9.1 CVE-2023-26584 Unauthenticated SQL injection in the GetStudentInconsistencies method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or mo… Idweb after 3.1.052 Fix from $2,3002023-10-25 CRITICAL 9.1 CVE-2023-27254 Unauthenticated SQL injection in the GetRoomChanges method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification… Idweb after 3.1.052 Fix from $2,3002023-10-25 CRITICAL 9.1 CVE-2023-27255 Unauthenticated SQL injection in the DeleteRoomChanges method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modifica… Idweb after 3.1.052 Fix from $2,3002023-10-25 CRITICAL 9.1 CVE-2023-27260 Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modific… Idweb after 3.1.052 Fix from $2,3002023-10-25 CRITICAL 9.1 CVE-2023-27262 Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modific… Idweb after 3.1.052 Fix from $2,3002023-10-25 HIGH 7.5 CVE-2023-27257 Missing authentication in the GetActiveToiletPasses method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of student informa… Idweb after 3.1.052 Fix from $1,9502023-10-25 HIGH 7.5 CVE-2023-27258 Missing authentication in the GetStudentGroupStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of student and … Idweb after 3.1.052 Fix from $1,9502023-10-25 HIGH 7.5 CVE-2023-27259 Missing authentication in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive studen… Idweb after 3.1.052 Fix from $1,9502023-10-25 HIGH 7.5 CVE-2023-27375 Missing authentication in the StudentPopupDetails_ContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction o… Idweb after 3.1.052 Fix from $1,9502023-10-25 HIGH 7.5 CVE-2023-27376 Missing authentication in the StudentPopupDetails_StudentDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction o… Idweb after 3.1.052 Fix from $1,9502023-10-25 HIGH 7.5 CVE-2023-27377 Missing authentication in the StudentPopupDetails_EmergencyContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows ex… Idweb after 3.1.052 Fix from $1,9502023-10-25 MEDIUM 6.5 CVE-2023-27261 Missing authentication in the DeleteAssignments method in IDAttend’s IDWeb application 3.1.052 and earlier allows deletion of data by unauthe… Idweb after 3.1.052 Fix from $1,6002023-10-25 MEDIUM 5.3 CVE-2023-27256 Missing authentication in the GetLogFiles method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of sensitive log files by una… Idweb after 3.1.052 Fix from $1,6002023-10-25 CRITICAL 9.1 CVE-2023-26568 Unauthenticated SQL injection in the GetStudentGroupStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modifica… Idweb after 3.1.052 Fix from $2,3002023-10-25 CRITICAL 9.1 CVE-2023-26569 Unauthenticated SQL injection in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or mo… Idweb after 3.1.052 Fix from $2,3002023-10-25 CRITICAL 9.1 CVE-2023-26572 Unauthenticated SQL injection in the GetExcursionList method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of… Idweb after 3.1.052 Fix from $2,3002023-10-25 CRITICAL 9.1 CVE-2023-26573 Missing authentication in the SetDB method in IDAttend’s IDWeb application 3.1.052 and earlier allows denial of service or theft of database login cr… Idweb after 3.1.052 Fix from $2,3002023-10-25 HIGH 8.8 CVE-2023-26578 Arbitrary file upload to web root in the IDAttend’s IDWeb application 3.1.013 allows authenticated attackers to upload dangerous files to web root su… Idweb Mitigation only Fix from $1,9502023-10-25 HIGH 7.5 CVE-2023-26570 Missing authentication in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive st… Idweb after 3.1.052 Fix from $1,9502023-10-25 HIGH 7.5 CVE-2023-26571 Missing authentication in the SetStudentNotes method in IDAttend’s IDWeb application 3.1.052 and earlier allows modification of student data by unau… Idweb after 3.1.052 Fix from $1,9502023-10-25 HIGH 7.5 CVE-2023-26574 Missing authentication in the SearchStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by u… Idweb after 3.1.052 Fix from $1,9502023-10-25 HIGH 7.5 CVE-2023-26575 Missing authentication in the SearchStudentsStaff method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student and… Idweb after 3.1.052 Fix from $1,9502023-10-25 HIGH 7.5 CVE-2023-26576 Missing authentication in the SearchStudentsRFID method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student dat… Idweb after 3.1.052 Fix from $1,9502023-10-25 HIGH 7.5 CVE-2023-26580 Unauthenticated arbitrary file read in the IDAttend’s IDWeb application 3.1.013 allows the retrieval of any file present on the web server by unauthe… Idweb after 3.1.052 Fix from $1,9502023-10-25 MEDIUM 5.4 CVE-2023-26577 Stored cross-site scripting in the IDAttend’s IDWeb application 3.1.052 and earlier allows attackers to hijack the browsing session of the logged in … Idweb after 3.1.052 Fix from $1,6002023-10-25 MEDIUM 5.3 CVE-2023-26579 Missing authentication in the DeleteStaff method in IDAttend’s IDWeb application 3.1.013 allows deletion of staff information by unauthenticated atta… Idweb Mitigation only Fix from $1,6002023-10-25 MEDIUM 6.1 CVE-2023-1356 Reflected cross-site scripting in the StudentSearch component in IDAttend’s IDWeb application 3.1.052 and earlier allows hijacking of a user’s browsi… Idweb 3.1.053+ Fix from $1,6002023-10-25