| Package | Affected versions | Patched versions |
|---|---|---|
| dr.id attendance system | < 3.5.0.0.0.5 | 3.5.0.0.0.5 |
Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free