Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown
CVE-2018-9307
Disclosure Date: April 04, 2018 (last updated November 26, 2024)
dsmall v20180320 allows XSS via the pdr_sn parameter to public/index.php/home/predeposit/index.html.
0
Attacker Value
Unknown
CVE-2018-9015
Disclosure Date: March 25, 2018 (last updated November 26, 2024)
dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdr_sn parameter (aka the CMS search box).
0
Attacker Value
Unknown
CVE-2018-9017
Disclosure Date: March 25, 2018 (last updated November 26, 2024)
dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI.
0
Attacker Value
Unknown
CVE-2018-9016
Disclosure Date: March 25, 2018 (last updated November 26, 2024)
dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI.
0
Attacker Value
Unknown
CVE-2018-9014
Disclosure Date: March 25, 2018 (last updated November 26, 2024)
dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdr_sn= request.
0
Attacker Value
Unknown
CVE-2018-8906
Disclosure Date: March 22, 2018 (last updated November 26, 2024)
dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/address_id/2.html.
0
