Browse CVEs

HIGH 8.8 CVE-2018-14729EPSS 11% The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code. Discuz\! after 3.4 Fix from $1,9502019-05-22 HIGH 8.1 CVE-2018-20422 Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common_member_w… Discuzx No fix yet Fix from $1,9502018-12-24 HIGH 8.1 CVE-2018-20423 Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-existing wxope… Discuzx No fix yet Fix from $1,9502018-12-24 MEDIUM 5.9 CVE-2018-20424 Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the common_member_wechatmp data structure via an ac=unbindmp req… Discuzx No fix yet Fix from $1,6002018-12-24 CRITICAL 9.8 CVE-2018-18083 An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during … Duomicms No fix yet Fix from $2,3002018-10-09 CRITICAL 9.8 CVE-2018-18084 An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as demonstrated by the uid parameter. Duomicms No fix yet Fix from $2,3002018-10-09 HIGH 7.5 CVE-2009-3185 SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL command… Crazy Star Plugin No fix yet Fix from $1,9502009-09-15 MEDIUM 6.5 CVE-2008-6958EPSS 6% wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter. Crossday Discuz\! Board No fix yet Fix from $1,6002009-08-12 HIGH 7.5 CVE-2008-3554 SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute arbitrary SQL commands via the searchid parameter in a s… Discuz No fix yet Fix from $1,9502008-08-08