Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-35361 EUVD-2024-35305GHSA-w2mr-3frj-pxv2

MTab Bookmark v1.9.5 has an SQL injection vulnerability in /LinkStore/getIcon. An attacker can execute arbitrary SQL statements through thi…

Published May 21, 2024 · Updated Feb 13, 2025 · Assigned by mitre

Description

MTab Bookmark v1.9.5 has an SQL injection vulnerability in /LinkStore/getIcon. An attacker can execute arbitrary SQL statements through this vulnerability without requiring any user rights.

References