Comsenz vulnerabilities

Products

• Discuzx 3
• Duomicms 2

Newest

• comsenz discuz! Comsenz Discuz! Admin Medal Moderation mod.php modmedalsubmit sql injection CVE-2026-105146 5.1 MediumOctober 4, 2026
• comsenz discuz\! The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows... CVE-2018-14729 Public exploit EPSS 10.4% 8.8 HighMay 22, 2019
• comsenz discuzx Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the... CVE-2018-20424 5.9 MediumDecember 24, 2018
• comsenz discuzx Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled... CVE-2018-20423 8.1 HighDecember 24, 2018
• comsenz discuzx Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass... CVE-2018-20422 8.1 HighDecember 24, 2018
• comsenz duomicms An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as... CVE-2018-18084 9.8 CriticalOctober 9, 2018
• comsenz duomicms An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php... CVE-2018-18083 9.8 CriticalOctober 9, 2018
• comsenz crazy star plugin SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote... CVE-2009-3185 Public exploit 7.5 HighSeptember 15, 2009
• comsenz crossday discuz\! board wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute... CVE-2008-6958 Public exploit 6.5 MediumAugust 12, 2009
• comsenz discuz SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute... CVE-2008-3554 Public exploit 7.5 HighAugust 8, 2008