CVE-2024-7732 — SECOM Dr.ID Attendance system - Unrestricted File Upload
Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, an…
Published: 2024-08-14 · CVSS: 9.8 · CVSS 3.1
Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7