CVE-2024-0530

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jan 15, 2024
Updated: May 17, 2024
CWE ID 89

Summary

CVE-2024-0530 is a critical vulnerability affecting CXBSoft Post-Office up to version 1.0. This issue lies within the HTTP POST Request Handler's file /apps/reg_go.php, specifically concerning an unknown functionality. The manipulation of the username_reg argument leads to a sql injection vulnerability. The exploit for this issue has been publicly disclosed, increasing the risk of potential attacks. Vendor contact regarding this disclosure was made but no response was received.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share