CVE-2023-26579

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Missing authentication in the DeleteStaff method in IDAttend’s IDWeb application 3.1.013 allows deletion of staff information by unauthenticated attackers.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-306

Affected software

Vendor	Product	Versions
IDAttend Pty Ltd	IDWeb	<= 3.1.052

References

https://www.themissinglink.com.au/security-advisories/cve-2023-26579Third Party Advisory
https://www.themissinglink.com.au/security-advisories/cve-2023-26579Third Party Advisory

Timeline

Published: Oct 25, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-26589.8A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this i CVE-2023-265807.5Unauthenticated arbitrary file read in the IDAttend’s IDWeb application 3.1.013 allows the retrieval of any file present on the web server b CVE-2023-265819.1Unauthenticated SQL injection in the GetVisitors method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modificati CVE-2023-265829.1Unauthenticated SQL injection in the GetExcursionDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or m CVE-2023-265839.1Unauthenticated SQL injection in the GetCurrentPeriod method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or mod CVE-2023-265849.1Unauthenticated SQL injection in the GetStudentInconsistencies method in IDAttend’s IDWeb application 3.1.052 and earlier allows extract CVE-2023-265855.0Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potent CVE-2023-265866.5Uncaught exception for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticat CVE-2023-265877.8Improper input validation for the Intel(R) Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation o CVE-2023-265887.5Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The a CVE-2023-265895.5Use after free in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially enable denial of se CVE-2023-26599.8A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown