CVE-2024-32369

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-32369
SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the start and limit parameter in the mliWhiteList.php component.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://cwe.mitre.org/data/definitions/89.html Not Applicable
https://github.com/chucrutis/CVE-2024-32369 Exploit
https://cwe.mitre.org/data/definitions/89.html Not Applicable
https://github.com/chucrutis/CVE-2024-32369 Exploit
Configurations

Configuration 1 (hide)

cpe:2.3:a:hsclabs:mailinspector:*:*:*:*:*:*:*:*
History

17 Jun 2025, 20:17

Type Values Removed Values Added
References () https://cwe.mitre.org/data/definitions/89.html - () https://cwe.mitre.org/data/definitions/89.html - Not Applicable
References () https://github.com/chucrutis/CVE-2024-32369 - () https://github.com/chucrutis/CVE-2024-32369 - Exploit
First Time Hsclabs
Hsclabs mailinspector
CPE cpe:2.3:a:hsclabs:mailinspector:*:*:*:*:*:*:*:*

21 Nov 2024, 09:14

Type Values Removed Values Added
References () https://cwe.mitre.org/data/definitions/89.html - () https://cwe.mitre.org/data/definitions/89.html -
References () https://github.com/chucrutis/CVE-2024-32369 - () https://github.com/chucrutis/CVE-2024-32369 -

03 Jul 2024, 01:56

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.3
Summary
  • (es) Vulnerabilidad de inyección SQL en HSC Cybersecurity HC Mailinspector 5.2.17-3 a 5.2.18 permite a un atacante remoto obtener información confidencial a través de un payload manipulado para el parámetro de inicio y límite en el componente mliWhiteList.php.
CWE CWE-89

07 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-07 15:15

Updated : 2025-06-17 20:17

NVD link : CVE-2024-32369

Mitre link : CVE-2024-32369

CVE.ORG link : CVE-2024-32369

JSON object : View

Products Affected

hsclabs

  • mailinspector
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')