Lucene search
+L

394 matches found

NVD
NVD
•added 2024/10/15 4:15 p.m.•44 views

CVE-2024-48624

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

5.3CVSS0.00222EPSS
SaveExploits1References1
Mend
Mend
•added 2024/10/15 12:00 a.m.•9 views

CVE-2024-48624

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

5.3CVSS0.00222EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/15 12:00 a.m.•7 views

CVE-2024-48624: Improper Neutralization of Input During Web Page Generation

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

5.3CVSS7.7AI score0.00222EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/10/15 12:00 a.m.•21 views

CVE-2024-48624

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

5.3CVSS5.9AI score
SaveExploits0References3
osv_cve
osv_cve
•added 2024/10/15 12:00 a.m.•14 views

CVE-2024-48623

In queue\index.php of DomainMOD below v4.12.0, the listid and domainid parameters in the GET request can be exploited to cause a reflected Cross Site Scripting XSS...

5.3CVSS6.3AI score
SaveExploits0References3
osv_cve
osv_cve
•added 2024/10/15 12:00 a.m.•25 views

CVE-2024-48622

A cross-site scripting XSS issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit.php and the cdfid parameter...

6.6CVSS5.9AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/15 12:00 a.m.•13 views

CVE-2024-48623: Improper Neutralization of Input During Web Page Generation

In queue\index.php of DomainMOD below v4.12.0, the listid and domainid parameters in the GET request can be exploited to cause a reflected Cross Site Scripting XSS...

5.3CVSS7.8AI score0.00222EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/10/15 12:00 a.m.•20 views

CVE-2024-48624

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

6.2AI score0.00222EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/15 12:00 a.m.•23 views

Domainmod security vulnerabilities

Domainmod is a PHP and MySQL based open source application from the Domainmod community for managing centrally located domain names and other Internet assets. A security vulnerability exists in Domainmod prior to version v4.12.0, which stems from a JavaScript code injection issue contained in the...

6.6CVSS8.7AI score0.00325EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/10/15 12:00 a.m.•8 views

PT-2024-33164

Name of the Vulnerable Software and Affected Versions DomainMOD versions prior to 4.12.0 Description The issue is related to a reflected Cross Site Scripting XSS vulnerability in the queueindex.php file of DomainMOD. The list id and domain id parameters in the GET request can be exploited to caus...

5.3CVSS0.00222EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/10/15 12:00 a.m.•27 views

PT-2024-33165 · Domainmod · Domainmod

Name of the Vulnerable Software and Affected Versions: DomainMOD versions prior to 4.12.0 Description: A reflected Cross Site Scripting XSS issue is present in the segmentsedit.php file. The segid parameter in the GET request can be exploited to cause this issue. Recommendations: For versions pri...

5.3CVSS8.2AI score0.00222EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/10/15 12:00 a.m.•42 views

CVE-2024-48624

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

0.00222EPSS
SaveExploits1References1
Mend
Mend
•added 2024/10/15 12:00 a.m.•12 views

CVE-2024-48623

In queue\index.php of DomainMOD below v4.12.0, the listid and domainid parameters in the GET request can be exploited to cause a reflected Cross Site Scripting XSS...

5.3CVSS0.00222EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/10/15 12:00 a.m.•37 views

CVE-2024-48623

In queue\index.php of DomainMOD below v4.12.0, the listid and domainid parameters in the GET request can be exploited to cause a reflected Cross Site Scripting XSS...

0.00222EPSS
SaveExploits1References1
Mend
Mend
•added 2024/10/15 12:00 a.m.•8 views

CVE-2024-48622

A cross-site scripting XSS issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit.php and the cdfid parameter...

6.9CVSS0.00325EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/10/15 12:00 a.m.•20 views

CVE-2024-48623

In queue\index.php of DomainMOD below v4.12.0, the listid and domainid parameters in the GET request can be exploited to cause a reflected Cross Site Scripting XSS...

6.4AI score0.00222EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/10/15 12:00 a.m.•39 views

CVE-2024-48622

A cross-site scripting XSS issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit.php and the cdfid parameter...

0.00325EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/15 12:00 a.m.•19 views

Domainmod security vulnerabilities

Domainmod is a PHP and MySQL based open source application from the Domainmod community for managing centrally located domain names and other Internet assets. A security vulnerability exists in Domainmod prior to version v4.12.0, which stems from a reflected cross-site scripting vulnerability...

5.3CVSS8.1AI score0.00222EPSS
SaveExploits1References2
CVE
CVE
•added 2024/10/15 12:00 a.m.•94 views

CVE-2024-48623

The DomainMOD open-source application, a PHP and MySQL-based tool for managing domain names, is vulnerable to a reflected Cross-Site Scripting (XSS) vulnerability in versions prior to v4.12.0 . The flaw exists in the queue est.php (referenced as queue est.php or queue est.php in various documents...

5.3CVSS6.4AI score0.00222EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/10/15 12:00 a.m.•24 views

PT-2024-33163 · Domainmod · Domainmod

Name of the Vulnerable Software and Affected Versions: DomainMOD versions prior to 4.12.0 Description: A cross-site scripting XSS issue allows remote attackers to inject JavaScript code via the "admin/domain-fields/edit.php" API endpoint and the cdfid parameter. This enables attackers to execute...

6.6CVSS8.2AI score0.00325EPSS
SaveExploits1References6
Rows per page
Query Builder