Discuz! DiscuzX file deletion vulnerability

Discuz! DiscuzX is an online forum system. A file deletion vulnerability exists in Discuz! DiscuzX version 3.4, which can be exploited by a remote attacker to delete the commonmemberwechatmp data structure by sending an ac=unbindmp request to the plugin.php page when wechat login is enabled...

CVE-2018-20424

Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the commonmemberwechatmp data structure via an ac=unbindmp request to plugin.php...

PT-2018-15368

Name of the Vulnerable Software and Affected Versions DiscuzX version 3.4 Description The issue allows remote attackers to delete the common member wechatmp data structure when WeChat login is enabled. This can be achieved by sending an ac=unbindmp request to the "plugin.php" endpoint...