Filtered by vendor Comsenz Subscriptions
Filtered by product Discuzx Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-20422 1 Comsenz 1 Discuzx 2019-10-03 N/A
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common_member_wechatmp to gain login access to an account via a plugin.php ac=wxregister request (the attacker does not have control over which account will be accessed).
CVE-2018-20423 1 Comsenz 1 Discuzx 2019-10-03 N/A
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-existing wxopenid value to the plugin.php ac=wxregister query string.
CVE-2018-20424 1 Comsenz 1 Discuzx 2019-01-10 N/A
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the common_member_wechatmp data structure via an ac=unbindmp request to plugin.php.