Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%
Buy Us a Coffee

CVE-2024-34472

EPSS 2.23% · P85
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-34472

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An authenticated blind SQL injection vulnerability exists in the mliRealtimeEmails.php file. The ordemGrid parameter in a POST request to /mailinspector/mliRealtimeEmails.php does not properly sanitize input, allowing an authenticated attacker to execute arbitrary SQL commands, leading to the potential disclosure of the entire application database.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
HSC Cybersecurity HC Mailinspector SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HSC Cybersecurity HC Mailinspector是HSC Cybersecurity公司的一个云电子邮件安全解决方案。 HSC Cybersecurity HC Mailinspector 5.2.17-3 到 v.5.2.18版本存在SQL注入漏洞，该漏洞源于对 /mailinspector/mliRealtimeEmails.php 的 POST 请求中的 ordemGrid 参数无法正确清理输入，从而允许经过身份验证的攻击者执行任意 SQL 命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2024-34472

#POC DescriptionSource LinkShenlong Link
1Nonehttps://github.com/osvaldotenorio/CVE-2024-34472POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-34472

请登录查看更多情报信息。

Other References for CVE-2024-34472 (1)

Same Patch Batch · n/a · 2024-05-06 · 44 CVEs total

CVE-2024-340907.3 HIGHArcher Platform 安全漏洞
CVE-2024-340897.3 HIGHArcher Platform 安全漏洞
CVE-2024-340917.3 HIGHArcher Platform 安全漏洞
CVE-2024-340935.3 MEDIUMArcher Platform 安全漏洞
CVE-2024-33405campcodes Complete Web-Based School Management System 安全漏洞
CVE-2024-33121Roothub 安全漏洞
CVE-2024-26312Archer Platform 安全漏洞
CVE-2024-34534Cybrosys Techno Solutions Text Commander 安全漏洞
CVE-2024-34092Archer Platform 安全漏洞
CVE-2024-34533ZI PT Solusi Usaha Mudah Analytic Data Query 安全漏洞
CVE-2023-33548ASUS RT-AC51U 安全漏洞
CVE-2024-34532Yvan Dotet PostgreSQL Query Deluxe 安全漏洞
CVE-2024-33406campcodes Complete Web-Based School Management System 安全漏洞
CVE-2024-33410campcodes Complete Web-Based School Management System 安全漏洞
CVE-2024-33407campcodes Complete Web-Based School Management System 安全漏洞
CVE-2024-33117crmeb 安全漏洞
CVE-2024-33411Campcodes Complete Web-Based School Management System 安全漏洞
CVE-2024-33404campcodes Complete Web-Based School Management System 安全漏洞
CVE-2024-33409campcodes Complete Web-Based School Management System 安全漏洞
CVE-2024-33118LuckyFrameWeb 安全漏洞

Showing top 20 of 44 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2024-34472

No comments yet

Leave a comment