CVE-2020-35559

概要

参考情報

• cert.vde.com/de-de/advisories/vde-2021-003 · Third Party Advisory
• mbconnectline.com/security-advice · Vendor Advisory

mbconnect24 のその他の脆弱性

• CVE-2026-33617中 5.3An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confid…
• CVE-2026-33616高 7.5An unauthenticated remote attacker can exploit an unauthenticated blind SQL Injection vulnerability in the mb24api endpoint due to improper …
• CVE-2026-33615緊急 9.1An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutra…
• CVE-2026-33614高 7.5An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getinfo endpoint due to improper neutra…
• CVE-2026-33613高 8.8Due to the improper neutralisation of special elements used in an OS command, a remote attacker can exploit an RCE vulnerability in the gene…