ComsenzDiscuz

4 exploits Active since Jan 2018
CVE-2018-5259 GITEE HIGH
DiscuzX X3.4 - Authenticated Attachment Deletion Restriction Bypass via aid Parameter
Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter.
25 stars
CVSS 8.8
CVE-2018-20424 GITEE MEDIUM
DiscuzX 3.4 - Unauthenticated Data Deletion via WeChat Unbind Request
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the common_member_wechatmp data structure via an ac=unbindmp request to plugin.php.
25 stars
CVSS 5.9
CVE-2018-20423 GITEE HIGH
DiscuzX 3.4 - Unauthenticated Registration Bypass via WeChat Login wxopenid Parameter
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-existing wxopenid value to the plugin.php ac=wxregister query string.
25 stars
CVSS 8.1
CVE-2018-20422 GITEE HIGH
DiscuzX 3.4 - Authentication Bypass via WeChat Login Plugin
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common_member_wechatmp to gain login access to an account via a plugin.php ac=wxregister request (the attacker does not have control over which account will be accessed).
25 stars
CVSS 8.1