Default credentials

DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field...

Default credentials

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field...

CVE-2018-20011

DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field...

CVE-2018-20011

DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field...

CVE-2018-20009

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field...

CVE-2018-20010

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field...

CVE-2018-20011

DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field...

CVE-2018-20011

CVE-2018-20011 affects DomainMOD up to version 4.11.01. The vulnerability is a stored XSS via the assets/add/category.php page, specifically in the CatagoryName and StakeHolder fields. Evidence across sources (NVD entry, Nuclei template, Exploit-DB) confirms an XSS payload can be injected after l...

CVE-2018-20011

DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field...

CVE-2018-20011: Improper Neutralization of Input During Web Page Generation

DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field...

PT-2018-15235

Name of the Vulnerable Software and Affected Versions DomainMOD version 4.11.01 Description The issue is related to XSS via the assets/add/category.php endpoint, specifically through the Category Name or Stakeholder field. Recommendations For DomainMOD version 4.11.01, update to a newer version...

PT-2018-15234

Name of the Vulnerable Software and Affected Versions DomainMOD version 4.11.01 Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the username field of the...

PT-2018-15233

Name of the Vulnerable Software and Affected Versions DomainMOD version 4.11.01 Description The issue allows for XSS via the "SSL Provider Name" or "SSL Provider URL" field in the assets/add/ssl-provider.php page. Recommendations For DomainMOD version 4.11.01, update to a newer version that...

CVE-2018-20010: Improper Neutralization of Input During Web Page Generation

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field...

CVE-2018-20009: Improper Neutralization of Input During Web Page Generation

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field...

DomainMOD cross-site scripting vulnerability (CNVD-2019-07966)

DomainMOD is an open source application for managing your domain names and other Internet assets in a central location. A cross-site scripting vulnerability exists in DomainMOD versions 4.11.01 and earlier, which can be exploited by an attacker via the assets/add/registrar-accounts.php UserName,...

Default credentials

DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field...

CVE-2018-19914

DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field...

CVE-2018-19914

DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field...

CVE-2018-19914

DomainMOD 4.11.01 contains a Cross-Site Scripting (XSS) vulnerability in assets/add/dns.php where the Profile Name or notes fields can inject JavaScript. Impact: arbitrary JavaScript execution in the victim’s browser, potentially with session hijacking, defacement, or information theft. Affected ...