RSS   Podatności dla 'Discuzx'   RSS

2018-12-23
 
CVE-2018-20424

CWE-20
 
 
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the common_member_wechatmp data structure via an ac=unbindmp request to plugin.php.

 
 
CVE-2018-20423

CWE-noinfo
 
 
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-existing wxopenid value to the plugin.php ac=wxregister query string.

 
 
CVE-2018-20422

CWE-287
 
 
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common_member_wechatmp to gain login access to an account via a plugin.php ac=wxregister request (the attacker does not have control over which account will be accessed).

 

 >>> Vendor: Comsenz 5 Produkty
Discuz
Crossday discuz! board
Crazy star plugin
Discuzx
Duomicms

Copyright 2024, cxsecurity.com

 

Back to Top