VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Apr 14, 2020· Updated Jun 17, 2026

CVE-2020-10381

CVE-2020-10381

Description

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Mbconnectline/Mymbconnect242 versions
    cpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*:*range: <=2.5.0
    • cpe:2.3:a:mbconnectline:mymbconnect24:*:*:*:*:*:*:*:*range: <=2.5.0
  • MB CONNECT LINE/mbCONNECT24 softwaredescription
  • MB Connect Lines/mbCONNECT24llm-fuzzy
    Range: <=2.5.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.