CVE-2020-35358: Insufficient Session Expiration

DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, both sessions using the changed password and old sessions in any other browser or device do not expire and remain active. Such flaws frequently give attackers unauthorized access t...

Domainmod code-related vulnerabilities

Domainmod is a PHP and MySQL based open source application for managing centrally located domain names and other Internet assets from the Domainmod community. A security vulnerability exists in DomainMOD domainmod-v4.15.0, which stems from an insufficient session expiration vulnerability. An...

DomainMOD < 4.14.0 Multiple Vulnerabilities

DomainMOD is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:domainmod:domainmod"; if...

CVE-2019-9080

DomainMOD before 4.14.0 uses MD5 without a salt for password storage...

CVE-2019-9080

DomainMOD before 4.14.0 uses MD5 without a salt for password storage...

Design/Logic Flaw

DomainMOD before 4.14.0 uses MD5 without a salt for password storage...

CVE-2019-9080

DomainMOD vulnerable component: DomainMOD before 4.14.0. Root cause: password storage uses MD5 without a salt, leading to weak password hashing. Impact described as high in CVSS-3.1 (C:H, I:N, A:N) with network access and no user interaction required; offline password attacks are implied by unsal...

CVE-2019-9080

DomainMOD before 4.14.0 uses MD5 without a salt for password storage...

CVE-2019-9080

DomainMOD before 4.14.0 uses MD5 without a salt for password storage...

PT-2020-11342

Name of the Vulnerable Software and Affected Versions DomainMOD versions prior to 4.14.0 Description The issue concerns the use of MD5 without a salt for password storage. This lack of salting in the password hashing process can make it easier for attackers to use precomputed tables rainbow table...

CVE-2019-9080: Use of Password Hash With Insufficient Computational Effort

DomainMOD before 4.14.0 uses MD5 without a salt for password storage...

CVE-2020-12735

reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover...

CVE-2020-12735

reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover...

Design/Logic Flaw

reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover...

CVE-2020-12735

reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover...

CVE-2020-12735

reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover...

CVE-2020-12735

DomainMOD 4.13.0 suffers a vulnerability in reset.php due to insufficient entropy in password reset requests, which can lead to account takeover. Affected component: reset functionality in DomainMOD; root cause described as low-entropy or predictable reset token handling. CVSS data is provided (b...

CVE-2020-12735: Insufficient Entropy

reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover...

PT-2020-13230

Name of the Vulnerable Software and Affected Versions DomainMOD version 4.13.0 Description The issue is related to insufficient entropy for password reset requests, which can lead to account takeover. Recommendations For DomainMOD version 4.13.0, consider implementing additional security measures...

DomainMod Security Feature Issue Vulnerability

DomainMod is a PHP and MySQL based open source application for managing centrally located domain names and other Internet assets. A security signature issue vulnerability exists in the reset.php file in DomainMOD version 4.13.0, which can be exploited by an attacker to compromise an account...