CVE-2018-5259

CVE-2018-5259 affects Discuz! DiscuzX X3.4. A vulnerability allows a remote authenticated attacker to bypass attachment deletion restrictions by manipulating the aid parameter. The CNVD entry describes a security bypass vulnerability in Discuz! DiscuzX X3.4, enabling the bypass via a modified aid...

PT-2018-16846

Name of the Vulnerable Software and Affected Versions DiscuzX version X3.4 Description The issue allows remote authenticated users to bypass intended attachment-deletion restrictions. This is achieved by modifying the aid parameter. Recommendations For version X3.4, consider restricting access to...