154 matches found
CVE-2020-10383
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated remote code execution in the commb24sysapi module...
CVE-2020-10382
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an authenticated remote code execution in the backup-scheduler...
CVE-2020-10381
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names...
Sql injection
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names...
CVE-2020-10383
The CVE-2020-10383 issue affects MB CONNECT LINE mbCONNECT24 and mymbCONNECT24 software up to version 2.5.0. The vulnerability is an unauthenticated remote code execution in the com_mb24sysapi module, allowing an attacker to execute arbitrary code remotely. Affected versions include mbCONNECT24 p...
CVE-2020-10382
MB CONNECT LINE mbCONNECT24 and the in-house remote maintenance solution mymbCONNECT24 are affected up to version 2.5.0. The vulnerability is an authenticated remote code execution in the backup-scheduler, surfaced across multiple sources. Impact is code execution on the device hosting the backup...
CVE-2020-10382
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an authenticated remote code execution in the backup-scheduler...
CVE-2020-10381
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names...
CVE-2020-10384: Improper Privilege Management
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1. There is a local privilege escalation from the www-data account to the root account...
PT-2020-12053 · Mb · Mbconnect24
Name of the Vulnerable Software and Affected Versions: mbCONNECT24 versions prior to 2.5.0 mymbCONNECT24 versions prior to 2.5.0 Description: An issue was discovered in the mbCONNECT24 and mymbCONNECT24 software, allowing for unauthenticated remote code execution in the com mb24sysapi module...
CVE-2020-10383: Undefined Security Weakness
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated remote code execution in the commb24sysapi module...
PT-2020-12051 · Mb Connect Line · Data24 +1
Name of the Vulnerable Software and Affected Versions: mbCONNECT24 versions through 2.5.0 mymbCONNECT24 versions through 2.5.0 Description: An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software, allowing for an unauthenticated SQL injection in DATA24. This enables...
CVE-2020-10382: Undefined Security Weakness
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an authenticated remote code execution in the backup-scheduler...
CVE-2020-10381: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names...