7 matches found
CVE-2024-32370
An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php component...
CVE-2024-32371
An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their privileges and gain administrative access by changing the type parameter from 1 to 0...
CVE-2024-32371
An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their privileges and gain administrative access by changing the type parameter from 1 to 0...
CVE-2024-32370
HSC Cybersecurity HC Mailinspector versions 5.2.17-3 through 5.2.18 are vulnerable to an issue where a remote attacker can obtain sensitive information . The root cause is insufficient input validation and sanitization of the id parameter within the mliSystemUsers.php component. By sending a spec...
CVE-2024-32370
An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php component...
CVE-2024-32369
A SQL Injection vulnerability exists in HSC Cybersecurity HC Mailinspector versions 5.2.17-3 through 5.2.18 . The flaw is located in the mliWhiteList.php component, where a remote attacker can use a crafted payload targeting the start and limit parameters to obtain sensitive information. A proof ...
CVE-2024-32369
SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the start and limit parameter in the mliWhiteList.php component...