4 matches found
Design/Logic Flaw
Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter...
CVE-2018-5377
Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter...
CVE-2018-5377: Missing Authorization
Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter...
PT-2018-16933
Name of the Vulnerable Software and Affected Versions DiscuzX version X3.4 Description The issue allows remote attackers to bypass intended access restrictions. This is achieved via the action parameter in the "archiver/index.php" endpoint. Recommendations For DiscuzX version X3.4, consider...