CVE-2024-35361

CVE-2024-35361 affects MTab Bookmark v1.9.5. A SQL injection vulnerability exists in the /LinkStore/getIcon API endpoint that allows an attacker to execute arbitrary SQL statements without any user privileges. The issue is documented across multiple sources (NVD/Red Hat/CVE records) and is rated ...

PT-2024-26460 · Unknown · Mtab Bookmark

Name of the Vulnerable Software and Affected Versions: MTab Bookmark version 1.9.5 Description: The issue is related to an SQL injection vulnerability in the /LinkStore/getIcon API endpoint. An attacker can execute arbitrary SQL statements through this vulnerability without requiring any user...