CVE-2018-20422 in DiscuzX
摘要
由 MITRE
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common_member_wechatmp to gain login access to an account via a plugin.php ac=wxregister request (the attacker does not have control over which account will be accessed).
VulDB is the best source for vulnerability data and more expert information about this specific topic.