2023-08-05 00:00:00
mitre
PUBLISHED
A SQL injection vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing unauthenticated attackers to write PHP files on the servers root directory, resulting in remote code execution.