348 matches found
CVE-2020-20989: Cross-Site Request Forgery (CSRF)
A cross-site request forgery CSRF in /admin/maintenance/ of Domainmod 4.13 allows attackers to arbitrarily delete logs...
CVE-2020-20988: Improper Neutralization of Input During Web Page Generation
A cross site scripting XSS vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "or Expiring Between" parameter...
Domainmod 跨站脚本漏洞
A cross-site scripting vulnerability exists in Domainmod, a PHP and MySQL-based open source application for managing domain names and other Internet assets in a central location from the Domainmod community, which stems from the lack of proper validation of client-side data by the web application...
DomainMOD < 4.18.0 Session Expiration Vulnerability
DomainMOD is prone to a session expiration vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:domainmod:domainmod"; i...
CVE-2020-35358
DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, both sessions using the changed password and old sessions in any other browser or device do not expire and remain active. Such flaws frequently give attackers unauthorized access t...
CVE-2020-35358
DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, both sessions using the changed password and old sessions in any other browser or device do not expire and remain active. Such flaws frequently give attackers unauthorized access t...
CVE-2020-35358
CVE-2020-35358 affects DomainMOD domainmod-v4.15.0 and is caused by an insufficient session expiration mechanism: after a password change, sessions authenticated with the new password and those using the old password remain active in other browsers/devices. Documents describe multiple reports (RH...
CVE-2020-35358
DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, both sessions using the changed password and old sessions in any other browser or device do not expire and remain active. Such flaws frequently give attackers unauthorized access t...
Domainmod 代码问题漏洞
Domainmod is a PHP and MySQL based open source application for managing centrally located domain names and other Internet assets from the Domainmod community. A security vulnerability exists in DomainMOD domainmod-v4.15.0, which stems from an insufficient session expiration vulnerability. An...
CVE-2020-35358: Insufficient Session Expiration
DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, both sessions using the changed password and old sessions in any other browser or device do not expire and remain active. Such flaws frequently give attackers unauthorized access t...
DomainMOD < 4.14.0 Multiple Vulnerabilities
DomainMOD is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:domainmod:domainmod"; if...
CVE-2019-9080
DomainMOD before 4.14.0 uses MD5 without a salt for password storage...
CVE-2019-9080
DomainMOD before 4.14.0 uses MD5 without a salt for password storage...
Design/Logic Flaw
DomainMOD before 4.14.0 uses MD5 without a salt for password storage...
CVE-2019-9080
DomainMOD vulnerable component: DomainMOD before 4.14.0. Root cause: password storage uses MD5 without a salt, leading to weak password hashing. Impact described as high in CVSS-3.1 (C:H, I:N, A:N) with network access and no user interaction required; offline password attacks are implied by unsal...
CVE-2019-9080
DomainMOD before 4.14.0 uses MD5 without a salt for password storage...
CVE-2019-9080: Use of Password Hash With Insufficient Computational Effort
DomainMOD before 4.14.0 uses MD5 without a salt for password storage...
CVE-2020-12735
reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover...