CVE-2023-26582 (published 2023-10-25T10:01:44.701Z)
Unauthenticated SQL injection in the GetExcursionDetails   method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.  
Affected products: Vendor: IDAttend Pty Ltd
Product: IDWeb
Versions: 0