CVE-2024-48624

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

CVE-2024-48624

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

CVE-2024-48624

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

CVE-2024-48623

In queue\index.php of DomainMOD below v4.12.0, the listid and domainid parameters in the GET request can be exploited to cause a reflected Cross Site Scripting XSS...

CVE-2024-48622

A cross-site scripting XSS issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit.php and the cdfid parameter...

CVE-2024-48622

A cross-site scripting XSS issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit.php and the cdfid parameter...

PT-2024-33164

Name of the Vulnerable Software and Affected Versions DomainMOD versions prior to 4.12.0 Description The issue is related to a reflected Cross Site Scripting XSS vulnerability in the queueindex.php file of DomainMOD. The list id and domain id parameters in the GET request can be exploited to caus...

CVE-2024-48623

The DomainMOD open-source application, a PHP and MySQL-based tool for managing domain names, is vulnerable to a reflected Cross-Site Scripting (XSS) vulnerability in versions prior to v4.12.0 . The flaw exists in the queue est.php (referenced as queue est.php or queue est.php in various documents...

CVE-2024-48624

DomainMOD versions prior to v4.12.0 are vulnerable to a reflected Cross-Site Scripting (XSS) vulnerability. The flaw exists in the segments edit.php page, where the segid parameter in a GET request is not properly neutralized before being included in the web page generation. This could allow an a...

PT-2024-33163 · Domainmod · Domainmod

Name of the Vulnerable Software and Affected Versions: DomainMOD versions prior to 4.12.0 Description: A cross-site scripting XSS issue allows remote attackers to inject JavaScript code via the "admin/domain-fields/edit.php" API endpoint and the cdfid parameter. This enables attackers to execute...

CVE-2024-48624

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

Domainmod security vulnerabilities

Domainmod is a PHP and MySQL based open source application from the Domainmod community for managing centrally located domain names and other Internet assets. A security vulnerability exists in Domainmod prior to version v4.12.0, which stems from a JavaScript code injection issue contained in the...

Domainmod security vulnerabilities

Domainmod is a PHP and MySQL based open source application from the Domainmod community for managing centrally located domain names and other Internet assets. A security vulnerability exists in Domainmod prior to version v4.12.0, which stems from the listid and domainid parameters in the...

CVE-2024-48624

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

CVE-2024-48623

In queue\index.php of DomainMOD below v4.12.0, the listid and domainid parameters in the GET request can be exploited to cause a reflected Cross Site Scripting XSS...

CVE-2024-48623

In queue\index.php of DomainMOD below v4.12.0, the listid and domainid parameters in the GET request can be exploited to cause a reflected Cross Site Scripting XSS...

CVE-2024-48624: Improper Neutralization of Input During Web Page Generation

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

CVE-2024-48623: Improper Neutralization of Input During Web Page Generation

In queue\index.php of DomainMOD below v4.12.0, the listid and domainid parameters in the GET request can be exploited to cause a reflected Cross Site Scripting XSS...

CVE-2024-48622: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit.php and the cdfid parameter...

CVE-2024-48623

In queue\index.php of DomainMOD below v4.12.0, the listid and domainid parameters in the GET request can be exploited to cause a reflected Cross Site Scripting XSS...