CVE-2018-20422

Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common_member_wechatmp to gain login access to an account via a plugin.php ac=wxregister request (the attacker does not have control over which account will be accessed).

• CWE-287

• https://gitee.com/ComsenzDiscuz/DiscuzX/issues/IPRUIExploit, Issue Tracking, Third Party Advisory
• https://gitee.com/ComsenzDiscuz/DiscuzX/issues/IPRUIExploit, Issue Tracking, Third Party Advisory

Published

Dec 24, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-20410WellinTech KingSCADA before 3.7.0.0.1 contains a stack-based…
• CVE-2018-20418index.php?p=admin/actions/entries/save-entry in Craft CMS 3.…
• CVE-2018-20419DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSR…
• CVE-2018-2042Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-20420In webERP 4.15, Z_CreateCompanyTemplateFile.php has Incorrec…
• CVE-2018-20421Go Ethereum (aka geth) 1.8.19 allows attackers to cause a de…
• CVE-2018-20423Discuz! DiscuzX 3.4, when WeChat login is enabled, allows re…
• CVE-2018-20424Discuz! DiscuzX 3.4, when WeChat login is enabled, allows re…
• CVE-2018-20425libming 0.4.8 has a NULL pointer dereference in the pushdup …
• CVE-2018-20426libming 0.4.8 has a NULL pointer dereference in the newVar3 …
• CVE-2018-20427libming 0.4.8 has a NULL pointer dereference in the getInt f…
• CVE-2018-20428libming 0.4.8 has a NULL pointer dereference in the strlenex…