CVE-2024-0528

Summary

CVE-2024-0528 is a critical vulnerability affecting CXBSoft Post-Office 1.0. The issue lies within an unnamed function of the /admin/pages/update_go.php file in the HTTP POST Request Handler component. Manipulation of the 'version' argument results in SQL injection, and the exploit has been made public. This vulnerability, identified as VDB-250698, can be exploited without the vendor's response, making it a significant threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.