CVE-2024-0529

A vulnerability has been found in CXBSoft Post-Office up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /apps/loginauth.php of the component HTTP POST Request Handler. The manipulation of the argument usernamelogin leads to sql injection...

CVE-2024-0529

creationtimestamp| type| source ---|---|--- 2024-01-15 03:26:39+00:00| seen| https://t.me/ctinow/168124 2024-02-03 09:07:07+00:00| seen| https://t.me/ctinow/178440...

CVE-2024-0529

CXBSoft Post-Office up to v1.0 contains a SQL injection in the HTTP POST Request Handler, via the username_login parameter in /apps/login_auth.php. Exploit details are publicly disclosed; no official fix/version information is provided in the supplied documents. A temporary workaround from PT-Sec...