CVE-2023-26575
Missing authentication in the SearchStudentsStaff method in IDAttend’s IDWeb application…
Missing authentication in the SearchStudentsStaff method in IDAttend’s IDWeb application…
Missing authentication in the SearchStudents method in IDAttend’s IDWeb application…
Missing authentication in the SetDB method in IDAttend’s IDWeb application…
Unauthenticated SQL injection in the GetExcursionList method in IDAttend’s IDWeb…
Missing authentication in the SetStudentNotes method in IDAttend’s IDWeb application…
Missing authentication in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb application…
Unauthenticated SQL injection in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb…
Unauthenticated SQL injection in the GetStudentGroupStudents method in IDAttend’s IDWeb…
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alexander Suess…