Unauthenticated SQL Injection In IDAttend’s IDWeb Application

Vulnerability

An unauthenticated SQL injection vulnerability exists in the GetRoomChanges method of IDAttend's IDWeb application. Affected versions include 3.1.052 and earlier, with discovery in version 3.1.013 [1]. The endpoint does not require authentication, allowing remote exploitation.

Exploitation

An attacker can exploit this vulnerability by sending crafted HTTP requests to the GetRoomChanges endpoint without any prior authentication. The lack of input sanitization allows the injection of malicious SQL queries, which are executed against the database.

Impact

Successful exploitation permits the attacker to extract or modify all data stored in the database. This includes sensitive information, leading to a complete compromise of confidentiality, integrity, and availability of the application's data.

Mitigation

The vulnerability is fixed in IDWeb version 3.1.053 [1]. All users should update to this version or later. No workarounds are documented; upgrading is the only recommended action.