95 matches found
CVE-2018-10297
Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp∾=article URI, related to mishandling of IMG elements associated with remote images...
EUVD-2018-17147
Malware in sbrugna...
EUVD-2018-12980
Malware in sbrugna...
EUVD-2020-24269
Malware in sbrugna...
EUVD-2022-48409
Malicious code in bioql PyPI...
CVE-2022-45543
Cross site scripting XSS vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search...
CVE-2020-36828
A vulnerability was found in DiscuzX up to 3.4-20200818. It has been classified as problematic. Affected is the function shownextstep of the file upload/install/include/installfunction.php. The manipulation of the argument uchidden leads to cross site scripting. It is possible to launch the attac...
CVE-2018-5376
Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecpupload.php op parameter...
CVE-2018-5377
Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter...
CVE-2018-5375
Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecpspace.php appid parameter in a delete action...
CVE-2018-10298
Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post=newthread because data/template/1diyportalview.tpl.php does not restrict the content...
CVE-2020-36828
A vulnerability was found in DiscuzX up to 3.4-20200818. It has been classified as problematic. Affected is the function shownextstep of the file upload/install/include/installfunction.php. The manipulation of the argument uchidden leads to cross site scripting. It is possible to launch the attac...
CVE-2020-36828
A vulnerability was found in DiscuzX up to 3.4-20200818. It has been classified as problematic. Affected is the function shownextstep of the file upload/install/include/installfunction.php. The manipulation of the argument uchidden leads to cross site scripting. It is possible to launch the attac...
CVE-2020-36828
CVE-2020-36828 (DiscuzX) affects DiscuzX up to version 3.4-20200818. The vulnerability is in the function show_next_step of the file upload/install/include/install_function.php, where manipulation of the uchidden argument enables cross-site scripting. The issue can be exploited remotely. A fixed ...
CVE-2020-36828 DiscuzX install_function.php show_next_step cross site scripting
A vulnerability was found in DiscuzX up to 3.4-20200818. It has been classified as problematic. Affected is the function shownextstep of the file upload/install/include/installfunction.php. The manipulation of the argument uchidden leads to cross site scripting. It is possible to launch the attac...
CVE-2020-36828 DiscuzX install_function.php show_next_step cross site scripting
A vulnerability was found in DiscuzX up to 3.4-20200818. It has been classified as problematic. Affected is the function shownextstep of the file upload/install/include/installfunction.php. The manipulation of the argument uchidden leads to cross site scripting. It is possible to launch the attac...
PT-2024-10839 · Discuzx · Discuzx
Name of the Vulnerable Software and Affected Versions: DiscuzX versions up to 3.4-20200818 Description: A problematic issue was found in the function show next step of the file upload/install/include/install function.php. The manipulation of the argument uchidden leads to cross-site scripting. It...
CVE-2020-36828: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in DiscuzX up to 3.4-20200818. It has been classified as problematic. Affected is the function shownextstep of the file upload/install/include/installfunction.php. The manipulation of the argument uchidden leads to cross site scripting. It is possible to launch the attac...