CVE-2024-34472

HSC Mailinspector versions 5.2.17-3 through 5.2.18 are vulnerable to an authenticated blind SQL injection in the mliRealtimeEmails.php file. The root cause is the improper sanitization of the ordemGrid parameter during a POST request to /mailinspector/mliRealtimeEmails.php. An authenticated attac...