Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-30884

Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in the misc.php component.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Codersclub Discuz
Products
Discuz\!ml Discuzx
CVE-2019-13956

Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH4_0df5_language=en to 4gH4_0df5_language=en'.phpinfo().'; (if the random prefix 4gH4_0df5_ were used).

CVSS 3.0 · 9.8 Critical EPSS 4.6% KEV · Not listed
Vendors
Codersclub
Products
Discuz\!ml