İçeriğe atla
Noroxi

discuz kayıtları

discuz üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
5
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 23
  3. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

13 kayıt
  • CVE-2018-5377
    40Planlayın

    Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter.

    KritikCVSS 9,8İstismar yokEPSS %2

    discuz · discuzx12 Oca 2018

  • CVE-2018-5259
    36İzleyin

    Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter.

    YüksekCVSS 8,8İstismar yokEPSS %2

    discuz · discuzx8 Oca 2018

  • CVE-2008-6957
    31İzleyin

    member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpas

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    discuz · discuz\!12 Ağu 2009

  • CVE-2006-5561
    30İzleyin

    SQL injection vulnerability in admincp.php in Discuz! GBK 5.0.0 allows remote attackers to execute arbitrary SQL commands via the cdb_auth c

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    discuz · discuz gbk27 Eki 2006

  • CVE-2009-4621
    30İzleyin

    SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz! allows remote attackers to execute arbitrary SQL commands

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    discuz · discuz\!18 Oca 2010

  • CVE-2010-4912
    30İzleyin

    SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands via the shopid paramet

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    discuz · ucenter home8 Eki 2011

  • CVE-2024-30884
    28İzleyin

    Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and o

    YüksekCVSS 7,1İstismar yokEPSS %1

    discuz · discuzx11 Nis 2024

  • CVE-2018-5376
    24İzleyin

    Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_upload.php op parameter.

    OrtaCVSS 6,1İstismar yokEPSS %1

    discuz · discuzx12 Oca 2018

  • CVE-2018-5375
    24İzleyin

    Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_space.php appid parameter in a delete action.

    OrtaCVSS 6,1İstismar yokEPSS %1

    discuz · discuzx12 Oca 2018

  • CVE-2022-45543
    24İzleyin

    Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or usernam

    OrtaCVSS 6,1İstismar yokEPSS %1

    discuz · discuzx15 Şub 2023

  • CVE-2018-5331
    21İzleyin

    Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/space_poll.php, as demonstrated by a mod=space do=poll request to home.

    OrtaCVSS 5,4İstismar yokEPSS %1

    discuz · discuzx10 Oca 2018

  • CVE-2018-10297
    21İzleyin

    Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associate

    OrtaCVSS 5,4İstismar yokEPSS %1

    discuz · discuzx22 Nis 2018

  • CVE-2018-10298
    21İzleyin

    Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does

    OrtaCVSS 5,4İstismar yokEPSS %1

    discuz · discuzx22 Nis 2018