CVE-2024-0530

Summary

CVE-2024-0530 is a critical vulnerability affecting CXBSoft Post-Office up to version 1.0. This issue lies within the HTTP POST Request Handler's file /apps/reg_go.php, specifically concerning an unknown functionality. The manipulation of the username_reg argument leads to a sql injection vulnerability. The exploit for this issue has been publicly disclosed, increasing the risk of potential attacks. Vendor contact regarding this disclosure was made but no response was received.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.