Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 30

Export CSV
CVE-2023-26576

Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the SearchStudentsRFID method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Idattend
Products
Idweb
CVE-2023-26575

Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the SearchStudentsStaff method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student and teacher data by unauthenticated attackers.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Idattend
Products
Idweb
CVE-2023-26574

Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the SearchStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Idattend
Products
Idweb
CVE-2023-26573

Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the SetDB method in IDAttend’s IDWeb application 3.1.052 and earlier allows denial of service or theft of database login credentials.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Idattend
Products
Idweb
CVE-2023-26572

Unauthenticated SQL Injection In IDAttend’s IDWeb Application

Unauthenticated SQL injection in the GetExcursionList method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Idattend
Products
Idweb
CVE-2023-26571

Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the SetStudentNotes method in IDAttend’s IDWeb application 3.1.052 and earlier allows modification of student data by unauthenticated attackers.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Idattend
Products
Idweb
CVE-2023-26570

Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Idattend
Products
Idweb
CVE-2023-26569

Unauthenticated SQL Injection In IDAttend’s IDWeb Application

Unauthenticated SQL injection in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Idattend
Products
Idweb
CVE-2023-26568

Unauthenticated SQL Injection In IDAttend’s IDWeb Application

Unauthenticated SQL injection in the GetStudentGroupStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Idattend
Products
Idweb
CVE-2023-1356

Reflected Cross-site Scripting In IDAttend’s IDWeb Application

Reflected cross-site scripting in the StudentSearch component in IDAttend’s IDWeb application 3.1.052 and earlier allows hijacking of a user’s browsing session by attackers who have convinced the said user to click on a malicious link.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Idattend
Products
Idweb