TI-2026-67534 CVE-2026-105146 · GHSA-4h38-vc9g-hmhp
Comsenz Discuz! Admin Medal Moderation mod.php modmedalsubmit sql injection
Priority MEDIUM 56
A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910.
Comsenz
Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Comsenz records in CISA KEVNo Comsenz vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
10 records
TI-2018-10577 CVE-2018-14729 · GHSA-cr7w-jxh8-23m4
The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and…
Priority MEDIUM 51
The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code.
TI-2018-12849 CVE-2018-18083 · GHSA-4x6f-6382-jv97
An issue was discovered in DuomiCMS 3.0.
Priority MEDIUM 47
An issue was discovered in DuomiCMS 3.0.
TI-2018-12850 CVE-2018-18084 · GHSA-rf28-p4rx-54x7
An issue was discovered in DuomiCMS 3.0.
Priority MEDIUM 45
An issue was discovered in DuomiCMS 3.0.
TI-2018-14468 CVE-2018-20423 · GHSA-vj79-v9cw-xm3f
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a…
Priority LOW 38
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-existing wxopenid value to the plugin.php ac=wxregister query string.
TI-2018-14467 CVE-2018-20422 · GHSA-53cv-6j2x-jm64
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass…
Priority LOW 38
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common_member_wechatmp to gain login access to an account via a plugin.php ac=wxregist…
TI-2008-06646 CVE-2008-6958 · GHSA-h43q-jw66-5cfx
wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to…
Priority LOW 38
wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter.
TI-2009-03030 CVE-2009-3185 · GHSA-g6x6-w452-43rx
SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows…
Priority LOW 35
SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action.
TI-2008-03401 CVE-2008-3554 · GHSA-8232-c5fm-5f68
SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to…
Priority LOW 35
SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute arbitrary SQL commands via the searchid parameter in a search action.
TI-2018-14469 CVE-2018-20424 · GHSA-xrcr-v699-vfjr
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the…
Priority LOW 28
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the common_member_wechatmp data structure via an ac=unbindmp request to plugin.php.