CVE-2024-0528

CRITIQUE 9.8CVE-2024-0528 · Published 15/01/2024 · updated 17/06/2026

En bref

CVE-2024-0528 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant post-office (cxbsoft).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.61%, plus élevée que 49.1% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
post-office cxbsoft	`= 1.0`	No fix yet

Description

A vulnerability, which was classified as critical, was found in CXBSoft Post-Office 1.0. Affected is an unknown function of the file /admin/pages/update_go.php of the component HTTP POST Request Handler. The manipulation of the argument version leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-250698 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References

note.zhaoj.in/share/grOgvdMgn0wg · Broken Link
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Autres vulnérabilités de post-office

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free