Approved changes feed: RSS · Atom

cpe:2.3:a:discuz:discuzx:x3.4:*:*:*:*:*:*:*

part: a version: x3.4 update: *

VendorDiscuz (0935b7c3-594c-5130-abae-96ba39e4073f)
ProductDiscuzx (48dd0bbd-193a-57b3-b0d3-3cf0bafc1f62)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/nsf-trc/discuzx purl2cpe 2026-06-01 10:16:40.914816
pkg:github/codersclub/discuzx purl2cpe 2026-06-01 10:16:40.914818
pkg:sourceforge/discuz31 purl2cpe 2026-06-01 10:16:40.914819

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-5377 vulnerable 2026-06-08 05:11:50.686885 Details available
Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter.
Published: 2018-01-12T09:00:00.000Z
Updated: 2024-09-16T19:00:39.977Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5375 vulnerable 2026-06-08 05:11:50.684921 Details available
Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_space.php appid parameter in a delete action.
Published: 2018-01-12T09:00:00.000Z
Updated: 2024-09-17T01:41:40.125Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5331 vulnerable 2026-06-08 05:11:50.617926 Details available
Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/space_poll.php, as demonstrated by a mod=space do=poll request to home.php.
Published: 2018-01-10T09:00:00.000Z
Updated: 2024-08-05T05:33:44.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5259 vulnerable 2026-06-08 05:11:50.527536 Details available
Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter.
Published: 2018-01-08T09:00:00.000Z
Updated: 2024-08-05T05:33:43.764Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.