Security Advisory
CVE-2023-26572
9.8
CRITICAL
Vulnerability Description
Unauthenticated SQL injection in the GetExcursionList method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.
Published Date
October 25, 2023
Official Source
NIST NVD Advisory