Exploitation Summary
EIP tracks 5 public exploits for CVE-2024-34470. PoCs published by Mr-r00t11, bigb0x, th3gokul. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository contains functional exploit code for CVE-2024-34470, a path traversal vulnerability in HSC MailInspector up to version 5.2.18. The exploit leverages the 'path' parameter in /public/loader.php to read arbitrary files, demonstrated by fetching /etc/passwd.
Description
An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An Unauthenticated Path Traversal vulnerability exists in the /public/loader.php file. The path parameter does not properly filter whether the file and directory passed are part of the webroot, allowing an attacker to read arbitrary files on the server.
Exploits (5)
The repository contains functional exploit code for CVE-2024-34470, a path traversal vulnerability in HSC MailInspector up to version 5.2.18. The exploit leverages the 'path' parameter in /public/loader.php to read arbitrary files, demonstrated by fetching /etc/passwd.
The repository contains a Python script that scans for CVE-2024-34470, a path traversal vulnerability in HSC Mailinspector. It checks for the presence of '/etc/passwd' via a crafted request to '/public/loader.php' but does not include exploit code for command injection or further exploitation.
The repository contains a functional exploit tool for CVE-2024-34470, an unauthenticated path traversal vulnerability in HSC Mailinspector. The tool sends crafted HTTP requests to retrieve sensitive files (e.g., /etc/passwd) and supports asynchronous scanning with threading and proxy options.
This repository contains a scanner for CVE-2024-34470, a Local File Inclusion (LFI) vulnerability in HSC Mailinspector. It checks for vulnerable endpoints by sending crafted requests and verifying responses for the presence of '/etc/passwd' content.
This repository provides a functional proof-of-concept for CVE-2024-34470, demonstrating a path traversal vulnerability in HSC Mailinspector's `/public/loader.php` file. The exploit allows unauthenticated users to read arbitrary files on the server by manipulating the `path` parameter.
Nuclei Templates (1)
mailinspector/public
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N