CVE-2020-10381

2020-04-1416:48:27

mitre

www.cve.org

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

31.7%

JSON

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names.

References

mbconnectline.com/security-advice/