Export limit exceeded: 26160 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2018-9307

dsmall v20180320 allows XSS via the pdr_sn parameter to public/index.php/home/predeposit/index.html.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Dsmall Project
Products
Dsmall
CVE-2018-9017

dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Dsmall Project
Products
Dsmall
CVE-2018-9016

dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Dsmall Project
Products
Dsmall
CVE-2018-9015

dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdr_sn parameter (aka the CMS search box).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Dsmall Project
Products
Dsmall
CVE-2018-9014

dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdr_sn= request.

CVSS 3.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Dsmall Project
Products
Dsmall
CVE-2018-8906

dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/address_id/2.html.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Dsmall Project
Products
Dsmall