CVE-2024-0528

CXBSoft Post-Office 1.0 contains a SQL injection in the HTTP POST Request Handler, via the version argument in /admin/pages/update_go.php. The vulnerability arises from an unsafely handled input in that parameter, with a critical impact (CVE-2024-0528). The advisory notes that the exploit has bee...

CVE-2024-0529

CXBSoft Post-Office up to v1.0 contains a SQL injection in the HTTP POST Request Handler, via the username_login parameter in /apps/login_auth.php. Exploit details are publicly disclosed; no official fix/version information is provided in the supplied documents. A temporary workaround from PT-Sec...

CVE-2024-0530

CXBSoft Post-Office ≤1.0 is affected by a SQL injection in the HTTP POST Request Handler (/apps/reg_go.php) via the username_reg parameter. Exploit disclosed publicly; vulnerability details consistently reported across multiple sources. No patch/version fix details provided in the documents. Prac...