GCVE - cpe:2.3:a:hsc:mailinspector:5.2.17-3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hsc:mailinspector:5.2.17-3:*:*:*:*:*:*:*

part: a version: 5.2.17-3 update: *

Vendor	Hsc (`dbc21c17-0640-5d1c-8b95-3dd4b9737743`)
Product	Mailinspector (`64d58b30-0357-5c65-9f9c-892a08d60753`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-34471`	vulnerable	2026-06-08 06:37:33.360278	Details available An issue was discovered in HSC Mailinspector 5.2.17-3. A Path Traversal vulnerability (resulting in file deletion) exists in the mliRealtimeEmails.php file. The filename parameter in the export HTML functionality does not properly validate the file location, allowing an attacker to read and delete arbitrary files on the server. This was observed when the mliRealtimeEmails.php file itself was read and subsequently deleted, resulting in a 404 error for the file and disruption of email information loading. Published: 2024-05-06T00:00:00.000Z Updated: 2024-08-02T02:51:11.429Z Open on db.gcve.eu Reference links https://github.com/osvaldotenorio/CVE-2024-34471	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32371`	vulnerable	2026-06-08 06:35:33.091142	Details available An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their privileges and gain administrative access by changing the type parameter from 1 to 0. Published: 2024-05-07T00:00:00.000Z Updated: 2024-08-02T02:06:44.116Z Open on db.gcve.eu Reference links https://cwe.mitre.org/data/definitions/639.html https://github.com/chucrutis/CVE-2024-32371	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32370`	vulnerable	2026-06-08 06:35:33.090614	Details available An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php component. Published: 2024-05-07T00:00:00.000Z Updated: 2024-08-02T02:06:44.218Z Open on db.gcve.eu Reference links https://cwe.mitre.org/data/definitions/639.html https://github.com/chucrutis/CVE-2024-32370	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32369`	vulnerable	2026-06-08 06:35:33.088775	Details available SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the start and limit parameter in the mliWhiteList.php component. Published: 2024-05-07T00:00:00.000Z Updated: 2024-08-02T02:06:44.054Z Open on db.gcve.eu Reference links https://cwe.mitre.org/data/definitions/89.html https://github.com/chucrutis/CVE-2024-32369	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.