Security Advisory

CVE-2018-20423

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-12-24 04:00:00

Last updated 2024-08-05 11:58:19

Assigner mitre

State PUBLISHED

Description

Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-existing wxopenid value to the plugin.php ac=wxregister query string.

← Browse all CVEs View on cve.org ↗