CVE-2019-13956

Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH40df5language=en to 4gH40df5language=en'.phpinfo.'; if the random prefix 4gH40df5 were used...

CVE-2019-13956

Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH40df5language=en to 4gH40df5language=en'.phpinfo.'; if the random prefix 4gH40df5 were used...

PT-2019-13493 · Comsenz · Discuz!Ml

Name of the Vulnerable Software and Affected Versions: Discuz!ML versions 3.2 through 3.4 Description: The issue allows remote attackers to execute arbitrary PHP code via a modified language cookie. This can be achieved by altering the cookie value, for example, changing 4gH4 0df5 language=en to...