Vulnerabilities
Vulnerable Software
Idattend:  >> Idweb  Security Vulnerabilities
Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.
CVSS Score
9.8
EPSS Score
0.002
Published
2023-10-25
Missing authentication in the DeleteAssignments method in IDAttend’s IDWeb application 3.1.052 and earlier allows deletion of data by unauthenticated attackers.
CVSS Score
5.3
EPSS Score
0.002
Published
2023-10-25
Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.
CVSS Score
9.8
EPSS Score
0.002
Published
2023-10-25
Missing authentication in the StudentPopupDetails_ContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers.
CVSS Score
7.5
EPSS Score
0.003
Published
2023-10-25
Missing authentication in the StudentPopupDetails_StudentDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers.
CVSS Score
7.5
EPSS Score
0.003
Published
2023-10-25
Missing authentication in the StudentPopupDetails_EmergencyContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers.
CVSS Score
7.5
EPSS Score
0.003
Published
2023-10-25
Unauthenticated SQL injection in the GetStudentGroupStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.
CVSS Score
9.8
EPSS Score
0.002
Published
2023-10-25
Unauthenticated SQL injection in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.
CVSS Score
9.8
EPSS Score
0.002
Published
2023-10-25
Missing authentication in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers.
CVSS Score
7.5
EPSS Score
0.003
Published
2023-10-25
Missing authentication in the SetStudentNotes method in IDAttend’s IDWeb application 3.1.052 and earlier allows modification of student data by unauthenticated attackers.
CVSS Score
7.5
EPSS Score
0.002
Published
2023-10-25


Contact Us

Shodan ® - All rights reserved