TI-2019-10409 CVE-2019-13956 · GHSA-j4hg-2fjr-f8m9
Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a…
Priority MEDIUM 49
Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH4_0df5_language=en to 4gH4_0df5_language=en'.phpinfo().'; (if the random pref…