SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the start and limit parameter in the mliWhiteList.php component.
References
| Link | Resource |
|---|---|
| https://cwe.mitre.org/data/definitions/89.html | Not Applicable |
| https://github.com/chucrutis/CVE-2024-32369 | Exploit |
| https://cwe.mitre.org/data/definitions/89.html | Not Applicable |
| https://github.com/chucrutis/CVE-2024-32369 | Exploit |
Configurations
History
17 Jun 2025, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Hsclabs
Hsclabs mailinspector |
|
| References | () https://cwe.mitre.org/data/definitions/89.html - Not Applicable | |
| References | () https://github.com/chucrutis/CVE-2024-32369 - Exploit | |
| CPE | cpe:2.3:a:hsclabs:mailinspector:*:*:*:*:*:*:*:* |
Information
Published : 2024-05-07 15:15
Updated : 2025-06-17 20:17
NVD link : CVE-2024-32369
Mitre link : CVE-2024-32369
CVE.ORG link : CVE-2024-32369
JSON object : View
Products Affected
hsclabs
- mailinspector
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')