medium6.5
CVE-2020-24568
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1.
Impact
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the lancompenent component, allowing logged-in attackers to discover arbitrary information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mbconnectline | Mbconnect24 | through 2.6.1 |
| Mbconnectline | Mymbconnect24 | through 2.6.1 |