CVE-2024-32370

CRITICAL

HSC Cybersecurity HC Mailinspector <5.2.18 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-32370. PoCs published by chucrutis.

AI-analyzed exploit summary The repository provides a detailed technical analysis of CVE-2024-32370, an information disclosure vulnerability in HSC Mailinspector due to insufficient input validation in the `id` parameter of `mliSystemUsers.php`. It includes the vulnerable component, parameter, payload, and attack scenario but lacks functional exploit code.

Description

An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php component.

Exploits (1)

nomisec WRITEUP 1 stars
by chucrutis · poc
https://github.com/chucrutis/CVE-2024-32370

The repository provides a detailed technical analysis of CVE-2024-32370, an information disclosure vulnerability in HSC Mailinspector due to insufficient input validation in the `id` parameter of `mliSystemUsers.php`. It includes the vulnerable component, parameter, payload, and attack scenario but lacks functional exploit code.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Theoretical
Target: HSC Cybersecurity HSC Mailinspector 5.2.17-3 to 5.2.18
No auth needed
Prerequisites: Network access to the vulnerable HSC Mailinspector instance
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0104
EPSS Percentile 59.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-782
Status published
Products (1)
hsclabs/mailinspector 5.2.17-3 - 5.2.19
Published May 07, 2024
Tracked Since Feb 18, 2026