PT-2018-15368

Name of the Vulnerable Software and Affected Versions DiscuzX version 3.4 Description The issue allows remote attackers to delete the common member wechatmp data structure when WeChat login is enabled. This can be achieved by sending an ac=unbindmp request to the "plugin.php" endpoint...