Discuz Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/discuz/ Sun, 26 Feb 2023 09:11:47 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Discuz Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/discuz/ 32 32 CVE-2008-6957 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6957/ Sun, 26 Feb 2023 09:11:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6957/ member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving predictable generation of the id parameter.

The post CVE-2008-6957 appeared first on CVE Vulnerability.

]]> member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving predictable generation of the id parameter.

The post CVE-2008-6957 appeared first on CVE Vulnerability.

]]> CVE-2018-5375 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5375/ Sun, 26 Feb 2023 06:50:19 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5375/ Discuz! DiscuzX X3.4 has XSS via the includespacecpspacecp_space.php appid parameter in a delete action.

The post CVE-2018-5375 appeared first on CVE Vulnerability.

]]> Discuz! DiscuzX X3.4 has XSS via the includespacecpspacecp_space.php appid parameter in a delete action.

The post CVE-2018-5375 appeared first on CVE Vulnerability.

]]> CVE-2018-5376 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5376/ Sun, 26 Feb 2023 06:50:19 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5376/ Discuz! DiscuzX X3.4 has XSS via the includespacecpspacecp_upload.php op parameter.

The post CVE-2018-5376 appeared first on CVE Vulnerability.

]]> Discuz! DiscuzX X3.4 has XSS via the includespacecpspacecp_upload.php op parameter.

The post CVE-2018-5376 appeared first on CVE Vulnerability.

]]> CVE-2018-5377 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5377/ Sun, 26 Feb 2023 06:50:19 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5377/ Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiverindex.php action parameter.

The post CVE-2018-5377 appeared first on CVE Vulnerability.

]]> Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiverindex.php action parameter.

The post CVE-2018-5377 appeared first on CVE Vulnerability.

]]> CVE-2018-5331 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5331/ Sun, 26 Feb 2023 06:50:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5331/ Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/space_poll.php, as demonstrated by a mod=space do=poll request to home.php.

The post CVE-2018-5331 appeared first on CVE Vulnerability.

]]> Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/space_poll.php, as demonstrated by a mod=space do=poll request to home.php.

The post CVE-2018-5331 appeared first on CVE Vulnerability.

]]> CVE-2018-5259 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5259/ Sun, 26 Feb 2023 06:50:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5259/ Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter.

The post CVE-2018-5259 appeared first on CVE Vulnerability.

]]> Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter.

The post CVE-2018-5259 appeared first on CVE Vulnerability.

]]> CVE-2018-10297 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-10297/ Sun, 26 Feb 2023 06:44:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-10297/ Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images.

The post CVE-2018-10297 appeared first on CVE Vulnerability.

]]> Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images.

The post CVE-2018-10297 appeared first on CVE Vulnerability.

]]> CVE-2018-10298 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-10298/ Sun, 26 Feb 2023 06:44:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-10298/ Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does not restrict the content.

The post CVE-2018-10298 appeared first on CVE Vulnerability.

]]> Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does not restrict the content.

The post CVE-2018-10298 appeared first on CVE Vulnerability.

]]> CVE-2022-45543 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-45543/ Thu, 23 Feb 2023 05:21:27 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-45543/ Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search.

The post CVE-2022-45543 appeared first on CVE Vulnerability.

]]> Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search.

The post CVE-2022-45543 appeared first on CVE Vulnerability.

]]>