Dsmall Project Dsmall
6 CVEs affecting Dsmall Project Dsmall. Latest disclosed: 2018-04-04. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-9014 | High | 7.5 | 2018-03-25 | dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdr_sn= request. |
CVE-2018-9307 | Medium | 6.1 | 2018-04-04 | dsmall v20180320 allows XSS via the pdr_sn parameter to public/index.php/home/predeposit/index.html. |
CVE-2018-9016 | Medium | 6.1 | 2018-03-25 | dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI. |
CVE-2018-8906 | Medium | 6.1 | 2018-03-22 | dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberadd… |
CVE-2018-9017 | Medium | 5.4 | 2018-03-25 | dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI. |
CVE-2018-9015 | Medium | 5.4 | 2018-03-25 | dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdr_sn parameter (aka the CMS search box). |