394 matches found
CVE-2018-19750
DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields...
CVE-2018-19751
DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields...
CVE-2018-19749
DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field...
Default credentials
DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields...
Default credentials
DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields...
CVE-2018-19751
DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields...
CVE-2018-19749
DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field...
Design/Logic Flaw
DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field...
CVE-2018-19750
DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields...
CVE-2018-19752
DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar...
CVE-2018-19750
DomainMOD up to version 4.11.01 contains a stored cross-site scripting (XSS) vulnerability in the admin/domain-fields notes field used when adding a Custom Domain Field. The issue is triggered via input in the notes field of the Add Custom Field action for Custom Domain Fields. The available docu...
CVE-2018-19752
DomainMOD 4.11.01 is affected by a stored cross-site scripting (XSS) vulnerability in the Registrar notes field exposed via assets/add/registrar.php. Exploitation could allow an attacker to run arbitrary JavaScript in a victim’s browser, with potential session hijacking or data leakage. Affected ...
CVE-2018-19751
DomainMOD 4.11.01 contains a stored cross-site scripting vulnerability in the admin/ssl-fields/add.php page (Display Name, Description & Notes fields). The root cause is input processing that allows injected JavaScript to be stored and executed in the victim’s browser, with potential for session ...
CVE-2018-19751
DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields...
CVE-2018-19750
DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields...
CVE-2018-19752
DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar...
CVE-2018-19749
DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field...
CVE-2018-19751
DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields...
CVE-2018-19749
DomainMOD 4.11.01 contains a stored XSS vulnerability in assets/add/account-owner.php (Owner name field). Affected product: DomainMOD (PHP/MySQL-based web app). Root cause: unsanitized input in the Owner name field leads to script execution in the victim’s browser. Impact per sources: arbitrary J...