<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: post-office</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-0530: A vulnerability was found in CXBSoft Post-Office up to 1.0 and classified as critical</title><link>https://patchthecve.com/cve/CVE-2024-0530.html</link><guid>https://patchthecve.com/cve/CVE-2024-0530.html</guid><pubDate>Wed, 17 Jun 2026 06:53:42 +0000</pubDate><description>MEDIUM 5.5: A vulnerability was found in CXBSoft Post-Office up to 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /apps/reg_go.php of the component HTTP POST Request Handler. The manipulation of the argument username_reg leads to sql injection. The exploit has b</description></item><item><title>CVE-2024-0529: A vulnerability has been found in CXBSoft Post-Office up to 1.0 and classified as critical</title><link>https://patchthecve.com/cve/CVE-2024-0529.html</link><guid>https://patchthecve.com/cve/CVE-2024-0529.html</guid><pubDate>Wed, 17 Jun 2026 06:53:42 +0000</pubDate><description>MEDIUM 5.5: A vulnerability has been found in CXBSoft Post-Office up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /apps/login_auth.php of the component HTTP POST Request Handler. The manipulation of the argument username_login leads to sql injection. </description></item><item><title>CVE-2024-0528: A vulnerability, which was classified as critical, was found in CXBSoft Post-Office 1.0</title><link>https://patchthecve.com/cve/CVE-2024-0528.html</link><guid>https://patchthecve.com/cve/CVE-2024-0528.html</guid><pubDate>Wed, 17 Jun 2026 06:53:42 +0000</pubDate><description>MEDIUM 5.5: A vulnerability, which was classified as critical, was found in CXBSoft Post-Office 1.0. Affected is an unknown function of the file /admin/pages/update_go.php of the component HTTP POST Request Handler. The manipulation of the argument version leads to sql injection. The exploit has been disclosed </description></item></channel></rss>