Vendors / Dsmall Project Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Dsmall Project records in CISA KEV No Dsmall Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 35
dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdr_sn= request.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01113 · Published 2018-03-25 · No fix listed CWE-200
Priority LOW 28
dsmall v20180320 allows XSS via the pdr_sn parameter to public/index.php/home/predeposit/index.html.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00683 · Published 2018-04-04 · No fix listed CWE-79
Priority LOW 28
dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00683 · Published 2018-03-25 · No fix listed CWE-79
Priority LOW 28
dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/address_id/2.html.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00683 · Published 2018-03-22 · No fix listed CWE-79
Priority LOW 25
dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00537 · Published 2018-03-25 · No fix listed CWE-79
Priority LOW 25
dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdr_sn parameter (aka the CMS search box).
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00537 · Published 2018-03-25 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 5 0 0
THREATIST.IORead the docs