Skip to content
Noroxi

discuz records

13 published records for vendor discuz.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

13 records
  • CVE-2018-5377
    40Plan

    Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter.

    CriticalCVSS 9.8No exploitEPSS 2%

    discuz · discuzxJan 12, 2018

  • CVE-2018-5259
    36Monitor

    Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter.

    HighCVSS 8.8No exploitEPSS 2%

    discuz · discuzxJan 8, 2018

  • CVE-2008-6957
    31Monitor

    member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpas

    HighCVSS 7.5Proof of conceptEPSS 3%

    discuz · discuz\!Aug 12, 2009

  • CVE-2006-5561
    30Monitor

    SQL injection vulnerability in admincp.php in Discuz! GBK 5.0.0 allows remote attackers to execute arbitrary SQL commands via the cdb_auth c

    HighCVSS 7.5Proof of conceptEPSS 1%

    discuz · discuz gbkOct 27, 2006

  • CVE-2009-4621
    30Monitor

    SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz! allows remote attackers to execute arbitrary SQL commands

    HighCVSS 7.5Proof of conceptEPSS 1%

    discuz · discuz\!Jan 18, 2010

  • CVE-2010-4912
    30Monitor

    SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands via the shopid paramet

    HighCVSS 7.5Proof of conceptEPSS 1%

    discuz · ucenter homeOct 8, 2011

  • CVE-2024-30884
    28Monitor

    Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and o

    HighCVSS 7.1No exploitEPSS 1%

    discuz · discuzxApr 11, 2024

  • CVE-2018-5376
    24Monitor

    Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_upload.php op parameter.

    MediumCVSS 6.1No exploitEPSS 1%

    discuz · discuzxJan 12, 2018

  • CVE-2018-5375
    24Monitor

    Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_space.php appid parameter in a delete action.

    MediumCVSS 6.1No exploitEPSS 1%

    discuz · discuzxJan 12, 2018

  • CVE-2022-45543
    24Monitor

    Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or usernam

    MediumCVSS 6.1No exploitEPSS 1%

    discuz · discuzxFeb 15, 2023

  • CVE-2018-5331
    21Monitor

    Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/space_poll.php, as demonstrated by a mod=space do=poll request to home.

    MediumCVSS 5.4No exploitEPSS 1%

    discuz · discuzxJan 10, 2018

  • CVE-2018-10297
    21Monitor

    Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associate

    MediumCVSS 5.4No exploitEPSS 1%

    discuz · discuzxApr 22, 2018

  • CVE-2018-10298
    21Monitor

    Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does

    MediumCVSS 5.4No exploitEPSS 1%

    discuz · discuzxApr 22, 2018