CVE-2018-19915

DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field...

CVE-2018-19913

CVE-2018-19913 affects DomainMOD up to version 4.11.01. The vulnerability is an XSS in assets/add/registrar-accounts.php, exploitable via the UserName, Reseller ID, or Notes fields. Public evidence includes exploit-db/packetstorm references and related CNVD/NVD entries. The connected documents co...

CVE-2018-19915

DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field...

CVE-2018-19914

DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field...

PT-2018-15162

Name of the Vulnerable Software and Affected Versions DomainMOD versions prior to 4.11.02 Description The issue allows for XSS attacks via the assets/edit/host.php Web Host Name or Web Host URL field. Recommendations For DomainMOD versions prior to 4.11.02, update to version 4.11.02 or later to...

PT-2018-15160

Name of the Vulnerable Software and Affected Versions DomainMOD versions prior to 4.11.02 Description The issue allows for XSS attacks via the UserName, Reseller ID, or notes field in the assets/add/registrar-accounts.php page. Recommendations For DomainMOD versions prior to 4.11.02, update to...

PT-2018-15161

Name of the Vulnerable Software and Affected Versions DomainMOD versions prior to 4.12 Description The issue allows for XSS attacks via the Profile Name or notes field in the assets/add/dns.php file. Recommendations For DomainMOD versions prior to 4.12, update to version 4.12 or later to resolve...

CVE-2018-19915: Improper Neutralization of Input During Web Page Generation

DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field...

CVE-2018-19914: Improper Neutralization of Input During Web Page Generation

DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field...

CVE-2018-19752

DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar...

CVE-2018-19752

DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar...

CVE-2018-19752

DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar...

CVE-2018-19752

DomainMOD 4.11.01 is affected by a stored cross-site scripting (XSS) vulnerability in the Registrar notes field exposed via assets/add/registrar.php. Exploitation could allow an attacker to run arbitrary JavaScript in a victim’s browser, with potential session hijacking or data leakage. Affected ...

CVE-2018-19749

DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field...

CVE-2018-19752

DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar...

CVE-2018-19749

DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field...

CISO series: Secure your privileged administrative accounts with a phased roadmap

In my role, I often meet with CISOs and security architects who are updating their security strategy to meet the challenges of continuously evolving attacker techniques and cloud platforms. A frequent topic is prioritizing security for their highest value assets, both the assets that have the mos...

PT-2018-15065

Name of the Vulnerable Software and Affected Versions DomainMOD versions prior to 4.11.02 Description The issue allows for XSS via the Owner name field in the assets/add/account-owner.php page. Recommendations For DomainMOD versions prior to 4.11.02, update to version 4.11.02 or later to resolve...

PT-2018-15068

Name of the Vulnerable Software and Affected Versions DomainMOD versions prior to 4.11.02 Description The issue allows for XSS via the notes field for the Registrar in the assets/add/registrar.php page. Recommendations For DomainMOD versions prior to 4.11.02, update to version 4.11.02 or later to...

CVE-2018-19752: Improper Neutralization of Input During Web Page Generation

DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar...