Comsenz: >> Discuz! >> 3.4 Security Vulnerabilities
The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code.
CVSS Score
8.8
EPSS Score
0.594
Published
2019-05-22
SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action.
CVSS Score
7.5
EPSS Score
0.003
Published
2009-09-15