Vulnerabilities > Secom > DR ID Attendance System > 3.3.0.3.20160517

DATE CVE VULNERABILITY TITLE RISK
2024-08-14 CVE-2024-7732 SQL Injection vulnerability in Secom Dr.Id Attendance System 3.3.0.320160517/3.4.0.0.3.11
Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents.
network
low complexity
secom CWE-89
critical
 9.8
9.8