Known Vulnerabilities for products from Dsmall Project
Listed below are 6 of the newest known vulnerabilities associated with the vendor "Dsmall Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2018-9307 json | dsmall v20180320 allows XSS via the pdr_sn parameter to public/index.php/home/predeposit/index.html. | 6.1 - MEDIUM | 2018-04-04 | 2018-04-18 |
| CVE-2018-9017 json | dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI. | 5.4 - MEDIUM | 2018-03-25 | 2018-04-18 |
| CVE-2018-9016 json | dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI. | 6.1 - MEDIUM | 2018-03-25 | 2018-04-18 |
| CVE-2018-9015 json | dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdr_sn parameter (aka the CMS search box). | 5.4 - MEDIUM | 2018-03-25 | 2018-04-18 |
| CVE-2018-9014 json | dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdr_sn= request. | 7.5 - HIGH | 2018-03-25 | 2018-04-20 |
| CVE-2018-8906 json | dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled ... | 6.1 - MEDIUM | 2018-03-22 | 2018-04-18 |
Known software with vulnerabilities from Dsmall Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Dsmall Project | Dsmall | 20180320 |