394 matches found
CVE-2018-11403
DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...
CVE-2018-11404
DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter...
CVE-2018-11404
DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter...
CVE-2018-11403
DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...
CVE-2018-11403
CVE-2018-11403 affects DomainMod v4.09.03, with an XSS flaw in assets/edit/account-owner.php using the oid parameter. Root cause: insufficient input sanitization/execution of user-supplied oid enabling script injection. Impact: cross-site scripting in affected sessions; CVSS v3.0 base score 5.4 (...
CVE-2018-11404
DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter...
CVE-2018-11403
DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...
CVE-2018-11404
CVE-2018-11404 affects DomainMod on version 4.09.03. The vulnerability is an XSS in the assets/edit/ssl-provider-account.php page via the sslpaid parameter, enabling injection of arbitrary script after login. Root cause: unsanitized input on the sslpaid parameter leading to reflected/stored/scrip...
PT-2018-10549
Name of the Vulnerable Software and Affected Versions DomainMod version 4.09.03 Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the sslpaid parameter of the...
CVE-2018-11403: Improper Neutralization of Input During Web Page Generation
DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...
DomainMOD Cross-Site Scripting Vulnerability
DomainMod is a PHP and MySQL based open source application for managing centrally located domain names and other Internet assets. A cross-site scripting vulnerability exists in DomainMod version 4.09.03. A remote attacker can exploit this vulnerability by sending the 'oid' parameter to the...
PT-2018-10548
Name of the Vulnerable Software and Affected Versions DomainMod version 4.09.03 Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the oid parameter of the "assets/edit/account-owner.php"...
DomainMod cross-site scripting vulnerability (CNVD-2018-10361)
DomainMod is a PHP and MySQL based open source application for managing centrally located domain names and other Internet assets. A cross-site scripting vulnerability exists in DomainMod version 4.09.03. A remote attacker can exploit this vulnerability by sending the 'sslpaid' parameter to the...