Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Missing Authentication In IDAttend’s IDWeb Application
Vulnerability Description
Missing authentication in the StudentPopupDetails_StudentDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
关键功能的认证机制缺失
Vulnerability Title
IDAttend IDWeb 访问控制错误漏洞
Vulnerability Description
IDAttend IDWeb是IDAttend公司的一个基于网络的模块。 IDAttend IDWeb 3.1.052 版本及之前版本存在安全漏洞，该漏洞源于 StudentPopupDetails_StudentDetails 方法缺少身份验证。
CVSS Information
N/A
Vulnerability Type
N/A