PatchTheCVEdsmall project vulnerabilities
Recent CVEs affecting dsmall project products. 6 tracked.
dsmall project has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-04-04. Highest priority: CVE-2018-9014 (score 48/100).
- CVE-2018-9307 MEDIUM 6.1 DOWNGRADE dsmall v20180320 allows XSS via the pdr_sn parameter to public/index.php/home/predeposit/index.html.
- CVE-2018-9017 MEDIUM 5.4 DOWNGRADE dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.ht
- CVE-2018-9016 MEDIUM 6.1 DOWNGRADE dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI.
- CVE-2018-9015 MEDIUM 5.4 DOWNGRADE dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdr_sn parameter (aka the CMS
- CVE-2018-9014 HIGH 7.5 DOWNGRADE dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdr_sn= reques
- CVE-2018-8906 MEDIUM 6.1 DOWNGRADE dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which
FAQ
How do I fix dsmall project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dsmall project being exploited right now?
None of the tracked dsmall project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dsmall project CVE should I patch first?
CVE-2018-9014 currently ranks highest (48/100): dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdr_sn= reques.