PT-2026-43559

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the sync data24 task due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

CVE-2026-33617 MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint

An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confidentiality, but there is no endpoint exposed to use these credentials...

CVE-2026-33617

CVE-2026-33617 concerns MB connect line mbCONNECT24, with vulnerability in the data24 endpoint allowing unauthenticated access to a configuration file containing database credentials. The impact is limited to confidentiality (LOW) and there is no endpoint described that uses the credentials. No e...

CVE-2026-33617 MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint

An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confidentiality, but there is no endpoint exposed to use these credentials...

data24.gr Improper Access Control vulnerability OBB-3832266

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-10381

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names...

CVE-2020-10381

CVE-2020-10381 affects the MB CONNECT LINE software family (mymbCONNECT24 and mbCONNECT24) up to version 2.5.0. The vulnerability is an unauthenticated SQL injection in DATA24, allowing an attacker to discover database and table names. Practical impact is disclosure of schema information without ...

PT-2020-12051 · Mb Connect Line · Data24 +1

Name of the Vulnerable Software and Affected Versions: mbCONNECT24 versions through 2.5.0 mymbCONNECT24 versions through 2.5.0 Description: An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software, allowing for an unauthenticated SQL injection in DATA24. This enables...