medium4.3
CVE-2020-24569
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1.
Impact
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the knximport component via an advanced attack vector, allowing logged in attackers to discover arbitrary information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mbconnectline | Mbconnect24 | through 2.6.1 |
| Mbconnectline | Mymbconnect24 | through 2.6.1 |