CVE-2024-35361

MTab Bookmark version 1.9.5 is vulnerable to an SQL injection flaw located in the /LinkStore/getIcon API endpoint. An unauthenticated attacker can exploit this vulnerability to execute arbitrary SQL statements without requiring any user rights. While no specific patch version is currently mention...

PT-2024-26460 · Unknown · Mtab Bookmark

Name of the Vulnerable Software and Affected Versions: MTab Bookmark version 1.9.5 Description: The issue is related to an SQL injection vulnerability in the /LinkStore/getIcon API endpoint. An attacker can execute arbitrary SQL statements through this vulnerability without requiring any user...

CVE-2024-35361: Improper Neutralization of Special Elements used in an SQL Command

MTab Bookmark v1.9.5 has an SQL injection vulnerability in /LinkStore/getIcon. An attacker can execute arbitrary SQL statements through this vulnerability without requiring any user rights...