Domain Trader Security Vulnerabilities

CVE-2008-0688

Cross-site scripting (XSS) vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action.

CVE-2018-10097

XSS exists in Domain Trader 2.5.3 via the recoverlogin.php email_address parameter.