Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common_member_wechatmp to gain login access to an account via a plugin.php ac=wxregister request (the attacker does not have control over which account will be accessed).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Discuz! DiscuzX 安全漏洞
Vulnerability Description
Discuz! DiscuzX是一套在线论坛系统。 Discuz! DiscuzX 3.4版本中存在安全漏洞。当微信登录被启用时，远程攻击者可借助一个非空的#wechat#common_member_wechatmp利用该漏洞绕过身份验证，获取账户的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A