CVE-2020-10381

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0

published April 14, 2020

CVSS
—
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01120 · 65.9th percentile
Published
2020-04-14T16:48Z
EPSS history
Timeline
  • 14 APR 16:48Z
    An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0
    cvelistv5