3 matches found
DomainMOD 4.11.01 ssl-provider-name Cross Site Scripting
Exploit Title : DomainMOD 4.11.01 and before - 'ssl-provider-name' Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 14-02-2019 Vendor Homepage : https://domainmod.org/ Software Information Link : https://github.com/DomainMod/DomainMod...
3.5CVSS5.5AI score0.04428EPSS
SaveExploits6
Default credentials
DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field...
3.5CVSS4.7AI score0.04428EPSS
SaveExploits6References2Affected Software1
CVE-2018-20009: Improper Neutralization of Input During Web Page Generation
DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field...
4.8CVSS7.7AI score0.04428EPSS
SaveExploits6References2
20