Code injection

dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...

CVE-2018-8906

dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...

CVE-2018-8906: Improper Neutralization of Input During Web Page Generation

dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...

PT-2018-18706

Name of the Vulnerable Software and Affected Versions dsmall version v20180320 Description The issue arises from a crafted street address that leads to an XSS vulnerability. This occurs when the address is mishandled at the /home/memberaddress/edit/address id/2.html endpoint, which is accessed fr...

dsmall Cross-Site Scripting Vulnerability

dsmall is a multi-user platform-level online shopping mall system. A cross-site scripting vulnerability exists in dsmall version 20180320, which stems from a failure of the program to properly handle street address information on the public/index.php/home/memberaddress/edit/addressid/2.html page....