SQL Injection

Every one of the 49 is a mark on the map. Named now: 1 to 26, most at risk first.

1. An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing…CVE-2020-10381Mbconnectline · 1.1% likely

   CWE-89

2. An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the lancompenent component, allowing logged-in attackers…CVE-2020-24568Mbconnectline · 0.8% likely

   CWE-89

3. SQL Injection via POST Requests Allowing Configuration Database ManipulationCVE-2025-41678MB connect line · CVSS 6.5 · 0.7% likely

   CWE-89

4. An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the knximport component via an advanced attack vector, al…CVE-2020-24569Mbconnectline · 0.7% likely

   CWE-89

5. Pre-Auth Blind SQLi in userinfo EndpointCVE-2026-32969MB connect line · CVSS 7.5 · 0.5% likely

   CWE-89

6. MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo EndpointCVE-2026-33615MB connect line · CVSS 9.1 · 0.4% likely

   CWE-89

7. Unauthenticated SQLi in getAccountData functionCVE-2026-40850MB connect line · CVSS 7.5 · 0.4% likely

   CWE-89

8. MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the mb24api EndpointCVE-2026-33616MB connect line · CVSS 7.5 · 0.3% likely

   CWE-89

9. MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the getinfo endpointCVE-2026-33614MB connect line · CVSS 7.5 · 0.3% likely

   CWE-89

10. Authenticated SQLi in Easy ViewCVE-2026-40831MB connect line · CVSS 6.5 · 0.3% likely

    CWE-89

11. Unauthenticated SQLi in sync_data24 taskCVE-2026-40819MB connect line · CVSS 7.5 · 0.3% likely

    CWE-89

12. Unauthenticated SQLi in _mb24confi_getDevice function functionCVE-2026-40818MB connect line · CVSS 7.5 · 0.3% likely

    CWE-89

13. Unauthenticated SQLi in getAlarmProfiles functionCVE-2026-40817MB connect line · CVSS 7.5 · 0.3% likely

    CWE-89

14. Unauthenticated SQLi in _mb24confi_getTagAlarm functionCVE-2026-40816MB connect line · CVSS 7.5 · 0.3% likely

    CWE-89

15. Unauthenticated SQLi in _mb24api_getUserAccount functionCVE-2026-40815MB connect line · CVSS 7.5 · 0.3% likely

    CWE-89

16. Unauthenticated SQLi in _mb24confi_getTagAlarm functionCVE-2026-40814MB connect line · CVSS 7.5 · 0.3% likely

    CWE-89

17. Unauthenticated SQLi in getLiveValuesCVE-2026-40813MB connect line · CVSS 7.5 · 0.3% likely

    CWE-89

18. Unauthenticated SQLi in getLiveValues functionCVE-2026-40812MB connect line · CVSS 7.5 · 0.3% likely

    CWE-89

19. Unauthenticated SQLi in ssoabstractserviceCVE-2026-40811MB connect line · CVSS 7.5 · 0.3% likely

    CWE-89

20. Unauthenticated SQLi in userinfo EndpointCVE-2026-40810MB connect line · CVSS 7.5 · 0.3% likely

    CWE-89

21. Authenticated SQLi in UpdateParam functionCVE-2026-40830MB connect line · CVSS 5.5 · 0.3% likely

    CWE-89

22. Authenticated SQLi in UpdateParam functionCVE-2026-40829MB connect line · CVSS 5.5 · 0.3% likely

    CWE-89

23. Authenticated SQLi in DeleteSysLogEntry functionCVE-2026-40828MB connect line · CVSS 5.5 · 0.3% likely

    CWE-89

24. Authenticated SQLi in _RemoveRequest functionCVE-2026-40827MB connect line · CVSS 5.5 · 0.3% likely

    CWE-89

25. Authenticated SQLi in getVpnData functionCVE-2026-40820MB connect line · CVSS 4.9 · 0.3% likely

    CWE-89

26. Authenticated SQLi in dsgvo_contracts viewCVE-2026-40826MB connect line · CVSS 4.9 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.