CVE-2018-9017

CVE-2018-9017 affects dsmall v20180320 with a cross-site scripting (XSS) vulnerability可 in the public/index.php/home/membersnsfriend/findlist.html page via the member search box. CNVD/CNVD-2018-07558 describe a remote attacker injecting HTML/JavaScript to obtain sensitive information. The provide...

CVE-2018-8906

Summary (CVE-2018-8906) : The vulnerability affects dsmall v20180320 and is an XSS flaw reachable via crafted street address input on the public/index.php/home/memberaddress/index.html page, mishandled at public/index.php/home/memberaddress/edit/address_id/2.html. The issue arises from improper h...

CVE-2018-9015

CVE-2018-9015 affects dsmall v20180320, with a cross-site scripting (XSS) vulnerability exploitable via the public/index.php/home/predeposit/index.html page’s pdr_sn parameter (the CMS search box). The issue stems from unsanitized input in the pdr_sn field, enabling injection of arbitrary web scr...

CVE-2018-9016

The CVE-2018-9016 entry corresponds to a cross‑site scripting (XSS) vulnerability in dsmall v20180320, exploitable via the main page search box (public/index.php/home). The CNVD entry explicitly notes that a remote attacker can inject arbitrary HTML/JavaScript to obtain sensitive information. The...

CVE-2018-9307

The CVE concerns dsmall v20180320, where an XSS flaw exists via the pdr_sn parameter in public/index.php/home/predeposit/index.html. The underlying issue is not detailed beyond the XSS mechanism; no explicit root-cause, affected versions beyond v20180320, or patch/mitigation is provided in the do...

CVE-2018-9014

Summary: CVE-2018-9014 affects dsmall v20180320, where a vulnerability allows physical path leakage via the URL public/index.php/home/predeposit/index.html?pdr_sn=. What is affected: dsmall v20180320 (multi-user online shopping mall system). Root cause (as described): exposure of physical path in...