DI
Vendor
Discuz
15
CVEs
0
On KEV
0
New 30D
Products
DI9.8
Discuzx
Discuz
9 CVEs0 on KEV0 new
DX9.1
Discuz! X5.0
Discuz!
3 CVEs0 on KEV0 new
DI–
Discuz!
Discuz
1 CVEs0 on KEV0 new
DG–
Discuz Gbk
Discuz
1 CVEs0 on KEV0 new
UH–
Ucenter Home
Discuz
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-49954 | DX Discuz! X5.0 Discuz! | 7.2 | Jun 15 | Discuz! X5.0 Local File Inclusion via enable_disable.php Plugin Directory |
| CVE-2026-49953 | DX Discuz! X5.0 Discuz! | 6.5 | Jun 15 | Discuz! X5.0 CAPTCHA Bypass via Predictable Character Set |
| CVE-2026-49952 | DX Discuz! X5.0 Discuz! | 9.1 | Jun 15 | Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle |
| CVE-2024-30884 | DI Discuzx Discuz | 7.1 | Apr 11 | Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted… |
| CVE-2022-45543 | DI Discuzx Discuz | 6.1 | Feb 15 | Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search |
| CVE-2018-10298 | DI Discuzx Discuz | 5.4 | Apr 22 | Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does not restrict the content |
| CVE-2018-10297 | DI Discuzx Discuz | 5.4 | Apr 22 | Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images |
| CVE-2018-5377 | DI Discuzx Discuz | 9.8 | Jan 12 | Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter |
| CVE-2018-5376 | DI Discuzx Discuz | 6.1 | Jan 12 | Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_upload.php op parameter |
| CVE-2018-5375 | DI Discuzx Discuz | 6.1 | Jan 12 | Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_space.php appid parameter in a delete action |
| CVE-2018-5331 | DI Discuzx Discuz | 5.4 | Jan 10 | Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/space_poll.php, as demonstrated by a mod=space do=poll request to home.php |
| CVE-2018-5259 | DI Discuzx Discuz | 8.8 | Jan 8 | Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter |
| CVE-2010-4912 | UH Ucenter Home Discuz | – | Oct 8 | SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands via the shopid parameter in a view action |
| CVE-2008-6957 | DI Discuz! Discuz | – | Aug 12 | member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving… |
| CVE-2006-5561 | DG Discuz Gbk Discuz | – | Oct 27 | SQL injection vulnerability in admincp.php in Discuz! GBK 5.0.0 allows remote attackers to execute arbitrary SQL commands via the cdb_auth cookie |