CVE-2024-0528

A vulnerability, which was classified as critical, was found in CXBSoft Post-Office 1.0. Affected is an unknown function of the file /admin/pages/updatego.php of the component HTTP POST Request Handler. The manipulation of the argument version leads to sql injection. The exploit has been disclose...

CVE-2024-0528

CXBSoft Post-Office 1.0 contains a SQL injection in the HTTP POST Request Handler, via the version argument in /admin/pages/update_go.php. The vulnerability arises from an unsafely handled input in that parameter, with a critical impact (CVE-2024-0528). The advisory notes that the exploit has bee...