Default credentials

DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field...

Default credentials

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field...

Default credentials

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field...

CVE-2018-20009

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field...

CVE-2018-20011

DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field...

CVE-2018-20010

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field...

CVE-2018-20011

DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field...

CVE-2018-20009

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field...

CVE-2018-20010

DomainMOD 4.11.01 is vulnerable to Cross-Site Scripting via the assets/add/ssl-provider-account.php username field. This is a stored XSS flaw (payload entered after logging into the DomainMOD panel on that page) that can lead to arbitrary JavaScript execution in the victim’s browser. The issue is...

CVE-2018-20011

CVE-2018-20011 affects DomainMOD up to version 4.11.01. The vulnerability is a stored XSS via the assets/add/category.php page, specifically in the CatagoryName and StakeHolder fields. Evidence across sources (NVD entry, Nuclei template, Exploit-DB) confirms an XSS payload can be injected after l...

CVE-2018-20010

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field...

CVE-2018-20009

DomainMOD 4.11.01 is vulnerable to Cross‑Site Scripting via the assets/add/ssl-provider.php fields (ssl-provider-name and ssl-provider’s-url). The issue is caused by insufficient input validation in DomainMOD’s SSL provider parameters, allowing an attacker to inject arbitrary JavaScript executed ...

PT-2018-15234

Name of the Vulnerable Software and Affected Versions DomainMOD version 4.11.01 Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the username field of the...

CVE-2018-20011: Improper Neutralization of Input During Web Page Generation

DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field...

CVE-2018-20010: Improper Neutralization of Input During Web Page Generation

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field...

CVE-2018-20009: Improper Neutralization of Input During Web Page Generation

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field...

PT-2018-15235

Name of the Vulnerable Software and Affected Versions DomainMOD version 4.11.01 Description The issue is related to XSS via the assets/add/category.php endpoint, specifically through the Category Name or Stakeholder field. Recommendations For DomainMOD version 4.11.01, update to a newer version...

PT-2018-15233

Name of the Vulnerable Software and Affected Versions DomainMOD version 4.11.01 Description The issue allows for XSS via the "SSL Provider Name" or "SSL Provider URL" field in the assets/add/ssl-provider.php page. Recommendations For DomainMOD version 4.11.01, update to a newer version that...

DomainMOD 4.11.01 - DisplayName Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting Exploit Author: Mohammed Abdul Raheem Vendor Homepage: domainmod https://domainmod.org/ Software Link: domainmod https://github.com/domainmod/domainmod Version: v4.09.03 to v4.11.01 CVE :...

DomainMOD 4.11.01 - DisplayName Cross-Site Scripting

DomainMOD 4.11.01 - DisplayName Cross-Site Scripting Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting Date: 2018-11-22 Exploit Author: Mohammed Abdul Raheem Vendor Homepage: domainmod https://domainmod.org/ Software Link: domainmod https://github.com/domainmod/domainmod Version: v4.09.03 t...