Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mbconnectline mbconnect24 vulnerabilities and exploits
(subscribe to this query)
668
VMScore
CVE-2020-10383
An issue exists in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions up to and including 2.5.0. There is an unauthenticated remote code execution in the com_mb24sysapi module.
Mbconnectline Mymbconnect24
Mbconnectline Mbconnect24
641
VMScore
CVE-2020-10384
An issue exists in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions up to and including 2.6.1. There is a local privilege escalation from the www-data account to the root account.
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
445
VMScore
CVE-2020-35564
An issue exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 up to and including 2.6.2. There is an outdated and unused component allowing for malicious user input of active code.
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
445
VMScore
CVE-2020-35565
An issue exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 up to and including 2.6.2. The login pages bruteforce detection is disabled by default.
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
NA
CVE-2023-0985
An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote user with low privileges can change the password of any user in the same account. This allow...
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
356
VMScore
CVE-2020-24568
An issue exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 up to and including 2.6.1. There is a blind SQL injection in the lancompenent component, allowing logged-in malicious users to discover arbitrary information.
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
356
VMScore
CVE-2020-24569
An issue exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 up to and including 2.6.1. There is a blind SQL injection in the knximport component via an advanced attack vector, allowing logged in malicious users to discover arbitrary information.
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
NA
CVE-2023-1779
Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions <=2.13.3 allow an authorized remote attacker with low privileges to view a limited amount of anoth...
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
383
VMScore
CVE-2020-24570
An issue exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 up to and including 2.6.1. There is a CSRF issue (with resultant SSRF) in the com_mb24proxy module, allowing malicious users to steal session information from logged-in users with a crafted link.
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
445
VMScore
CVE-2021-34575
In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends.
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895
blind SQL injection
CVE-2024-5064
CVE-2023-52677
CVE-2023-52682
CVE-2024-30051
CVE-2024-35849
remote attackers
remote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »