Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2008-6957

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving predictable generation of the id parameter.

CVSS 2.0 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Discuz
Products
Discuz\!
CVE-2009-4621

SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz! allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to forummission.php.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Discuz Patching
Products
Discuz\! Jianghu Inn
CVE-2024-30884

Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in the misc.php component.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Codersclub Discuz
Products
Discuz\!ml Discuzx