Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mbconnectline mymbconnect24 vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2020-35564
An issue exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 up to and including 2.6.2. There is an outdated and unused component allowing for malicious user input of active code.
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
8.8
CVSSv3
CVE-2023-0985
An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote user with low privileges can change the password of any user in the same account. This allow...
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
5.3
CVSSv3
CVE-2020-10381
An issue exists in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions up to and including 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing malicious users to discover database and table names.
Mbconnectline Mymbconnect24
Mbconnectline Mbconnect24
8.8
CVSSv3
CVE-2020-10382
An issue exists in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions up to and including 2.5.0. There is an authenticated remote code execution in the backup-scheduler.
Mbconnectline Mymbconnect24
Mbconnectline Mbconnect24
9.8
CVSSv3
CVE-2020-10383
An issue exists in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions up to and including 2.5.0. There is an unauthenticated remote code execution in the com_mb24sysapi module.
Mbconnectline Mymbconnect24
Mbconnectline Mbconnect24
7.8
CVSSv3
CVE-2020-10384
An issue exists in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions up to and including 2.6.1. There is a local privilege escalation from the www-data account to the root account.
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
6.5
CVSSv3
CVE-2020-24568
An issue exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 up to and including 2.6.1. There is a blind SQL injection in the lancompenent component, allowing logged-in malicious users to discover arbitrary information.
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
7.5
CVSSv3
CVE-2021-34575
In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends.
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
7.5
CVSSv3
CVE-2021-34580
In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted invalid login attempts.
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
4.3
CVSSv3
CVE-2020-24569
An issue exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 up to and including 2.6.1. There is a blind SQL injection in the knximport component via an advanced attack vector, allowing logged in malicious users to discover arbitrary information.
Mbconnectline Mbconnect24
Mbconnectline Mymbconnect24
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
NEXT »