Search vulnerabilities

Results 2

Export CSV
CVE-2009-3185

SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
CVE-2018-14729

The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code.

CVSS 3.0 · 8.8 High EPSS 10.4% KEV · Not listed
Vendors
Products