Idattend Pty Ltd Idweb
30 CVEs affecting Idattend Pty Ltd Idweb. Latest disclosed: 2023-10-25. Critical: 11, High: 16.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-27262 | Critical | 9.8 | 2023-10-25 | Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of a… |
CVE-2023-27260 | Critical | 9.8 | 2023-10-25 | Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of a… |
CVE-2023-27255 | Critical | 9.8 | 2023-10-25 | Unauthenticated SQL injection in the DeleteRoomChanges method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of al… |
CVE-2023-27254 | Critical | 9.8 | 2023-10-25 | Unauthenticated SQL injection in the GetRoomChanges method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all da… |
CVE-2023-26584 | Critical | 9.8 | 2023-10-25 | Unauthenticated SQL injection in the GetStudentInconsistencies method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification… |
CVE-2023-26583 | Critical | 9.8 | 2023-10-25 | Unauthenticated SQL injection in the GetCurrentPeriod method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all da… |
CVE-2023-26582 | Critical | 9.8 | 2023-10-25 | Unauthenticated SQL injection in the GetExcursionDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all… |
CVE-2023-26581 | Critical | 9.8 | 2023-10-25 | Unauthenticated SQL injection in the GetVisitors method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by u… |
CVE-2023-26572 | Critical | 9.8 | 2023-10-25 | Unauthenticated SQL injection in the GetExcursionList method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data… |
CVE-2023-26569 | Critical | 9.8 | 2023-10-25 | Unauthenticated SQL injection in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification… |
CVE-2023-26568 | Critical | 9.8 | 2023-10-25 | Unauthenticated SQL injection in the GetStudentGroupStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of al… |
CVE-2023-26578 | High | 8.8 | 2023-10-25 | Arbitrary file upload to web root in the IDAttend’s IDWeb application 3.1.013 allows authenticated attackers to upload dangerous files to web root such as ASP… |
CVE-2023-26573 | High | 8.2 | 2023-10-25 | Missing authentication in the SetDB method in IDAttend’s IDWeb application 3.1.052 and earlier allows denial of service or theft of database login credentials. |
CVE-2023-27377 | High | 7.5 | 2023-10-25 | Missing authentication in the StudentPopupDetails_EmergencyContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction o… |
CVE-2023-27376 | High | 7.5 | 2023-10-25 | Missing authentication in the StudentPopupDetails_StudentDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitiv… |
CVE-2023-27375 | High | 7.5 | 2023-10-25 | Missing authentication in the StudentPopupDetails_ContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitiv… |
CVE-2023-27259 | High | 7.5 | 2023-10-25 | Missing authentication in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student and teac… |
CVE-2023-27258 | High | 7.5 | 2023-10-25 | Missing authentication in the GetStudentGroupStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of student and teacher da… |
CVE-2023-27257 | High | 7.5 | 2023-10-25 | Missing authentication in the GetActiveToiletPasses method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of student information by un… |
CVE-2023-26580 | High | 7.5 | 2023-10-25 | Unauthenticated arbitrary file read in the IDAttend’s IDWeb application 3.1.013 allows the retrieval of any file present on the web server by unauthenticated a… |