CVE-2018-11559

DomainMod 4.10.0 is affected by a Stored XSS in the profile settings endpoint (/settings/profile/index.php) via the new_last_name parameter. Root cause: persistent injection in the user profile handling leading to script execution when viewed. Impact is limited to what the XSS allows per the sour...

CVE-2018-11558

CVE-2018-11558 is a stored XSS vulnerability in DomainMod 4.10.0, exploiting the new_first_name parameter in the "/settings/profile/index.php" page. The connected documents consistently describe the issue as a cross-site scripting flaw affecting DomainMod 4.10.0, with multiple sources naming the ...

CVE-2018-11558

DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" newfirstname parameter...

CVE-2018-11559

DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" newlastname parameter...

DomainMod cross-site scripting vulnerability (CNVD-2018-10862)

DomainMod is a PHP and MySQL based open source application for managing centrally located domain names and other Internet assets. A cross-site scripting vulnerability exists in DomainMod version 4.10.0. A remote attacker can exploit this vulnerability to execute JavaScript code with the help of t...

DomainMod cross-site scripting vulnerability (CNVD-2018-10863)

DomainMod is a PHP and MySQL based open source application for managing centrally located domain names and other Internet assets. A cross-site scripting vulnerability exists in DomainMod version 4.10.0. A remote attacker can exploit this vulnerability to execute JavaScript code with the help of t...

DomainMod 4.09.03 - oid Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter Exploit Author: longer（email protected） Vendor Homepage: domainmod https://github.com/domainmod/domainmod Software Link: domainmod...

DomainMod 4.09.03 - sslpaid Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter Exploit Author: longer（email protected） Vendor Homepage: domainmod https://github.com/domainmod/domainmod Software Link: domainmod...

DomainMod 4.09.03 - sslpaid Cross-Site Scripting

DomainMod 4.09.03 - sslpaid Cross-Site Scripting Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter Date: 2018-05-28 Exploit Author: longer（[email protected]） Vendor Homepage: domainmod https://github.com/domainmod/domainmod Software Link:...

DomainMod 4.09.03 - oid Cross-Site Scripting

DomainMod 4.09.03 - oid Cross-Site Scripting Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter Date: 2018-05-28 Exploit Author: longer（[email protected]） Vendor Homepage: domainmod https://github.com/domainmod/domainmod Software Link: domainmod...

DomainMod 4.09.03 Cross Site Scripting

Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter Date: 2018-05-28 Exploit Author: longeri1/[email protected]/4 Vendor Homepage: domainmod https://github.com/domainmod/domainmod Software Link: domainmod https://github.com/domainmod/domainmod Version:...

DomainMod 4.09.03 - 'sslpaid' Cross-Site Scripting

Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter Date: 2018-05-28 Exploit Author: longer（[email protected]） Vendor Homepage: domainmod https://github.com/domainmod/domainmod Software Link: domainmod https://github.com/domainmod/domainmod...

DomainMod 4.09.03 - 'oid' Cross-Site Scripting

Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter Date: 2018-05-28 Exploit Author: longer（[email protected]） Vendor Homepage: domainmod https://github.com/domainmod/domainmod Software Link: domainmod https://github.com/domainmod/domainmod Version: v4.09.0...

Design/Logic Flaw

DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...

CVE-2018-11403

DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...

CVE-2018-11404

DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter...

CVE-2018-11404

DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter...

CVE-2018-11403

DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...

CVE-2018-11404

CVE-2018-11404 affects DomainMod on version 4.09.03. The vulnerability is an XSS in the assets/edit/ssl-provider-account.php page via the sslpaid parameter, enabling injection of arbitrary script after login. Root cause: unsanitized input on the sslpaid parameter leading to reflected/stored/scrip...

CVE-2018-11403

CVE-2018-11403 affects DomainMod v4.09.03, with an XSS flaw in assets/edit/account-owner.php using the oid parameter. Root cause: insufficient input sanitization/execution of user-supplied oid enabling script injection. Impact: cross-site scripting in affected sessions; CVSS v3.0 base score 5.4 (...