CVE-2018-9307

dsmall v20180320 allows XSS via the pdrsn parameter to public/index.php/home/predeposit/index.html...

CVE-2018-9307

dsmall v20180320 allows XSS via the pdrsn parameter to public/index.php/home/predeposit/index.html...

CVE-2018-9307: Improper Neutralization of Input During Web Page Generation

dsmall v20180320 allows XSS via the pdrsn parameter to public/index.php/home/predeposit/index.html...

PT-2018-18965

Name of the Vulnerable Software and Affected Versions dsmall version v20180320 Description The issue allows for XSS via the pdr sn parameter to the "public/index.php/home/predeposit/index.html" endpoint. Recommendations For version v20180320, avoid using the pdr sn parameter in the affected...

CVE-2018-9016

dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI...

CVE-2018-9016

The CVE-2018-9016 entry corresponds to a cross‑site scripting (XSS) vulnerability in dsmall v20180320, exploitable via the main page search box (public/index.php/home). The CNVD entry explicitly notes that a remote attacker can inject arbitrary HTML/JavaScript to obtain sensitive information. The...

CVE-2018-9017: Improper Neutralization of Input During Web Page Generation

dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI...

CVE-2018-9016: Improper Neutralization of Input During Web Page Generation

dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI...

CVE-2018-9015: Improper Neutralization of Input During Web Page Generation

dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdrsn parameter aka the CMS search box...

PT-2018-18780

Name of the Vulnerable Software and Affected Versions dsmall version v20180320 Description The issue allows physical path leakage via a /public/index.php/home/predeposit/index.html?pdr sn= request. Recommendations For dsmall version v20180320, avoid using the pdr sn variable in the...

PT-2018-18783

Name of the Vulnerable Software and Affected Versions dsmall version 20180320 Description The issue allows for XSS via the member search box at the "public/index.php/home/membersnsfriend/findlist.html" URI. Recommendations For version 20180320, consider restricting access to the member search box...

PT-2018-18782

Name of the Vulnerable Software and Affected Versions dsmall version 20180320 Description The issue allows for XSS via the main page search box at the "public/index.php/home" URI. Recommendations For version 20180320, avoid using the search box in the main page until a fix is available. As a...

Code injection

dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...

CVE-2018-8906: Improper Neutralization of Input During Web Page Generation

dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...