PT-2018-18783

Name of the Vulnerable Software and Affected Versions dsmall version 20180320 Description The issue allows for XSS via the member search box at the "public/index.php/home/membersnsfriend/findlist.html" URI. Recommendations For version 20180320, consider restricting access to the member search box...

CVE-2018-9014: Exposure of Sensitive Information to an Unauthorized Actor

dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdrsn= request...

CVE-2018-9015: Improper Neutralization of Input During Web Page Generation

dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdrsn parameter aka the CMS search box...

PT-2018-18780

Name of the Vulnerable Software and Affected Versions dsmall version v20180320 Description The issue allows physical path leakage via a /public/index.php/home/predeposit/index.html?pdr sn= request. Recommendations For dsmall version v20180320, avoid using the pdr sn variable in the...

PT-2018-18782

Name of the Vulnerable Software and Affected Versions dsmall version 20180320 Description The issue allows for XSS via the main page search box at the "public/index.php/home" URI. Recommendations For version 20180320, avoid using the search box in the main page until a fix is available. As a...

CVE-2018-9017: Improper Neutralization of Input During Web Page Generation

dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI...

CVE-2018-9016: Improper Neutralization of Input During Web Page Generation

dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI...

Code injection

dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...

CVE-2018-8906: Improper Neutralization of Input During Web Page Generation

dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...

CVE-2018-7219

application/admin/controller/Admin.php in NoneCms 1.3.0 has CSRF, as demonstrated by changing an admin password or adding an account via a public/index.php/admin/admin/edit.html request...

PT-2018-17958

Name of the Vulnerable Software and Affected Versions NoneCms version 1.3.0 Description The issue allows for CSRF attacks, which can be used to perform actions such as changing an admin password or adding an account. This can be achieved by sending a request to the...

CVE-2009-3120: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-2442: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a resultats-recherche action...

CVE-2009-2379: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2008-6734: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

Keller Web Admin CMS 0.94 Pro Local File Inclusion Vulnerability

No description provided by source. =========================================================== Keller Web Admin CMS Local File Inclusion Vulnerability =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...