Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-34472

Published: 06/05/2024 Updated: 06/05/2024

Vulnerability Summary

An issue exists in HSC Mailinspector 5.2.17-3 through v.5.2.18. An authenticated blind SQL injection vulnerability exists in the mliRealtimeEmails.php file. The ordemGrid parameter in a POST request to /mailinspector/mliRealtimeEmails.php does not properly sanitize input, allowing an authenticated malicious user to execute arbitrary SQL commands, leading to the potential disclosure of the entire application database.

Github Repositories

https://github.com/osvaldotenorio/CVE-2024-34472

CVE-2024-34472 Description: An authenticated user can abuse Blind SQL injection vulnerability exists in the mliRealtimeEmailsphp file The ordemGrid parameter in a POST request to /mailinspector/mliRealtimeEmailsphp does not Properly sanitize input, allowing an authenticated attacker to execute arbitrary SQL commands, leading to the potential disclosure of the entire applica

References

https://github.com/osvaldotenorio/CVE-2024-34472https://nvd.nist.govhttps://github.com/osvaldotenorio/CVE-2024-34472
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3201CVE-2024-4779CVE-2024-35090CVE-2024-5084hard-codedCVE-2024-4985HTML injectionCVE-2024-33655local file inclusion
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook