Known Vulnerabilities for Dsmall by Dsmall Project
Listed below are 6 of the newest known vulnerabilities associated with "Dsmall" by "Dsmall Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2018-9307 json | dsmall v20180320 allows XSS via the pdr_sn parameter to public/index.php/home/predeposit/index.html. | 6.1 - MEDIUM | 2018-04-04 | 2018-04-18 |
| CVE-2018-9017 json | dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI. | 5.4 - MEDIUM | 2018-03-25 | 2018-04-18 |
| CVE-2018-9016 json | dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI. | 6.1 - MEDIUM | 2018-03-25 | 2018-04-18 |
| CVE-2018-9015 json | dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdr_sn parameter (aka the CMS search box). | 5.4 - MEDIUM | 2018-03-25 | 2018-04-18 |
| CVE-2018-9014 json | dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdr_sn= request. | 7.5 - HIGH | 2018-03-25 | 2018-04-20 |
| CVE-2018-8906 json | dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled ... | 6.1 - MEDIUM | 2018-03-22 | 2018-04-18 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Dsmall Project | Dsmall | 20180320 |