EUVD-2018-20622

Malware in sbrugna...

CVE-2018-9017

dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI...

Code injection

dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI...

CVE-2018-9017

dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI...

CVE-2018-9017

CVE-2018-9017 affects dsmall v20180320 with a cross-site scripting (XSS) vulnerability可 in the public/index.php/home/membersnsfriend/findlist.html page via the member search box. CNVD/CNVD-2018-07558 describe a remote attacker injecting HTML/JavaScript to obtain sensitive information. The provide...

PT-2018-18783

Name of the Vulnerable Software and Affected Versions dsmall version 20180320 Description The issue allows for XSS via the member search box at the "public/index.php/home/membersnsfriend/findlist.html" URI. Recommendations For version 20180320, consider restricting access to the member search box...

CVE-2018-9017: Improper Neutralization of Input During Web Page Generation

dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI...