← Back

Dsmall

dsmall

Vendor: Dsmall Project • 6 CVEs

CVEs (6)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-9307
1Dsmall Project
1Dsmall
Jun 17, 2026
Apr 4, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
dsmall v20180320 allows XSS via the pdr_sn parameter to public/index.php/home/predeposit/index.html.
CVE-2018-9017
1Dsmall Project
1Dsmall
Jun 17, 2026
Mar 25, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI.
CVE-2018-9016
1Dsmall Project
1Dsmall
Jun 17, 2026
Mar 25, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI.
CVE-2018-9015
1Dsmall Project
1Dsmall
Jun 17, 2026
Mar 25, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdr_sn parameter (aka the CMS search box).
CVE-2018-9014
1Dsmall Project
1Dsmall
Jun 17, 2026
Mar 25, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdr_sn= request.
CVE-2018-8906
1Dsmall Project
1Dsmall
Jun 17, 2026
Mar 22, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/address_id/2.html.