Bookmark vulnerabilities

2 known vulnerabilities in Bookmark from MTab. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  bookmark: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-35361May 21, 2024MTab

  MTab Bookmark v1.9.5 has an SQL injection vulnerability in /LinkStore/getIcon. An attacker can execute arbitrary SQL statements through this vulnerability without requiring any user rights.

• 8.1 High severity

  Bookmark: Improper Access Control

  CVE-2023-7193Dec 31, 2023MTab

  A vulnerability was found in MTab Bookmark up to 1.2.6 and classified as critical. This issue affects some unknown processing of the file public/install.php of the component Installation. The manipulation leads to improper access controls. The complexity of an