An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the knximport component via an advanced attack vector, allowing logged in attackers to discover arbitrary information.
| Software | From | Fixed in |
|---|---|---|
| mbconnectline / mymbconnect24 | - | 2.6.1.x |
| mbconnectline / mbconnect24 | - | 2.6.1.x |