Vulnerabilities

TI-2026-67534 CVE-2026-105146 · GHSA-4h38-vc9g-hmhp

Comsenz Discuz! Admin Medal Moderation mod.php modmedalsubmit sql injection

MEDIUM 56

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00244 Published 2026-10-04 No fix listed CWE-74

TI-2018-10577 CVE-2018-14729 · GHSA-cr7w-jxh8-23m4

The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and…

MEDIUM 51

The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.10426 Published 2019-05-22 No fix listed CWE-20

TI-2018-14469 CVE-2018-20424 · GHSA-xrcr-v699-vfjr

Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the…

LOW 28

Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the common_member_wechatmp data structure via an ac=unbindmp request to plugin.php.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00903 Published 2018-12-24 No fix listed CWE-20

TI-2018-14468 CVE-2018-20423 · GHSA-vj79-v9cw-xm3f

Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a…

LOW 38

Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-existing wxopenid value to the plugin.php ac=wxregister query string.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.0118 Published 2018-12-24 No fix listed

TI-2018-14467 CVE-2018-20422 · GHSA-53cv-6j2x-jm64

Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass…

LOW 38

Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common_member_wechatmp to gain login access to an account via a plugin.php ac=wxregist…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01291 Published 2018-12-24 No fix listed CWE-287

TI-2018-12850 CVE-2018-18084 · GHSA-rf28-p4rx-54x7

An issue was discovered in DuomiCMS 3.0.

MEDIUM 45

An issue was discovered in DuomiCMS 3.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01271 Published 2018-10-09 No fix listed CWE-89

TI-2018-12849 CVE-2018-18083 · GHSA-4x6f-6382-jv97

An issue was discovered in DuomiCMS 3.0.

MEDIUM 47

An issue was discovered in DuomiCMS 3.0.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02477 Published 2018-10-09 No fix listed CWE-94

TI-2009-03030 CVE-2009-3185 · GHSA-g6x6-w452-43rx

SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows…

LOW 35

SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0097 Published 2009-09-15 No fix listed CWE-89

TI-2008-06646 CVE-2008-6958 · GHSA-h43q-jw66-5cfx

wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to…

LOW 38

wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0577 Published 2009-08-12 No fix listed CWE-94

TI-2008-03401 CVE-2008-3554 · GHSA-8232-c5fm-5f68

SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute arbitrary SQL commands via the searchid parameter in a search action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2008-08-08 No fix listed CWE-89

Vulnerabilities

Filters