Mbconnect24 Security Vulnerabilities and Issues — Mbconnect24 CVE List

Lucene search

MbconnectlineMbconnect24

7 matches found

CVE•added 2020/09/30 6:15 p.m.•65 views

CVE-2020-24569

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the knximport component via an advanced attack vector, allowing logged in attackers to discover arbitrary information.

4.3CVSS5.3AI score0.00278EPSS

CVE•added 2020/10/02 7:15 p.m.•51 views

CVE-2020-24568

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the lancompenent component, allowing logged-in attackers to discover arbitrary information.

6.5CVSS6.9AI score0.00401EPSS

CVE•added 2020/09/30 6:15 p.m.•49 views

CVE-2020-24570

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a CSRF issue (with resultant SSRF) in the com_mb24proxy module, allowing attackers to steal session information from logged-in users with a crafted link.

6.5CVSS6.3AI score0.00133EPSS

CVE•added 2020/04/14 5:15 p.m.•34 views

CVE-2020-10382

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an authenticated remote code execution in the backup-scheduler.

8.8CVSS8.8AI score0.02398EPSS

CVE•added 2020/04/14 6:15 p.m.•31 views

CVE-2020-10384

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1. There is a local privilege escalation from the www-data account to the root account.

7.8CVSS7.7AI score0.00109EPSS

CVE•added 2020/04/14 5:15 p.m.•30 views

CVE-2020-10381

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names.

5.3CVSS5.9AI score0.00435EPSS

CVE•added 2020/04/14 5:15 p.m.•29 views

CVE-2020-10383

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated remote code execution in the com_mb24sysapi module.

9.8CVSS9.8AI score0.02486EPSS