ComsenzDiscuz

4 exploits Active since Jan 2018
CVE-2018-5259 GITEE HIGH
Discuz! DiscuzX X3.4 - Auth Bypass
Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter.
25 stars
CVSS 8.8
CVE-2018-20424 GITEE MEDIUM
Comsenz Discuzx - Improper Input Validation
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the common_member_wechatmp data structure via an ac=unbindmp request to plugin.php.
25 stars
CVSS 5.9
CVE-2018-20423 GITEE HIGH
Discuz! DiscuzX <3.4 - Auth Bypass
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-existing wxopenid value to the plugin.php ac=wxregister query string.
25 stars
CVSS 8.1
CVE-2018-20422 GITEE HIGH
Comsenz Discuzx - Authentication Bypass
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common_member_wechatmp to gain login access to an account via a plugin.php ac=wxregister request (the attacker does not have control over which account will be accessed).
25 stars
CVSS 8.1