CVE-2022-50789 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via dns.php

SOUND4 IMPACT/FIRST/PULSE/Eco =2.x contains a command injection vulnerability that allows local authenticated users to create malicious files in the /tmp directory with .dns.pid extension. Unauthenticated attackers can execute the malicious commands by making a single HTTP POST request to the...

CVE-2022-50789

Summary: CVE-2022-50789 affects SOUND4 IMPACT/FIRST/PULSE/Eco 2.x and earlier. A command injection exists in the dns.php script allowing local authenticated users to create malicious files in /tmp with a .dns.pid extension; an unauthenticated attacker could trigger command execution via a single ...

CVE-2022-50789: Improper Neutralization of Special Elements used in an OS Command

SOUND4 IMPACT/FIRST/PULSE/Eco =2.x contains a command injection vulnerability that allows local authenticated users to create malicious files in the /tmp directory with .dns.pid extension. Unauthenticated attackers can execute the malicious commands by making a single HTTP POST request to the...

CVE-2022-50695: Allocation of Resources Without Limits or Throttling

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x contains a network vulnerability that allows unauthenticated attackers to send ICMP signals to arbitrary hosts through network command scripts. Attackers can abuse ping.php, traceroute.php, and dns.php to generate network flooding attacks targeting...

SOUND4 IMPACT/FIRST/PULSE/Eco 2.x dns.php Command Injection

SOUND4 IMPACT/FIRST/PULSE/Eco =2.x dns.php Conditional Command Injection Vendor: SOUND4 Ltd. Product web page: https://www.sound4.com | https://www.sound4.biz Affected version: FM/HD Radio Processing: Impact/Pulse/First Version 2: 1.1/2.15 Impact/Pulse/First Version 1: 2.1/1.69 Impact/Pulse Eco...

DomainMOD 4.11.01 - (assets/add/dns.php) Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting Exploit Author: Mohammed Abdul Raheem Vendor Homepage: domainmod https://domainmod.org/ Software Link: domainmod https://github.com/DomainMod/DomainMod Version: v4.09.03 to v4.11.01 CVE :...

CVE-2018-19914

DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field...

Default credentials

DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field...

CVE-2018-19914

DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field...

CVE-2018-19914

DomainMOD 4.11.01 contains a Cross-Site Scripting (XSS) vulnerability in assets/add/dns.php where the Profile Name or notes fields can inject JavaScript. Impact: arbitrary JavaScript execution in the victim’s browser, potentially with session hijacking, defacement, or information theft. Affected ...

CVE-2018-19914: Improper Neutralization of Input During Web Page Generation

DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field...

PT-2018-15161

Name of the Vulnerable Software and Affected Versions DomainMOD versions prior to 4.12 Description The issue allows for XSS attacks via the Profile Name or notes field in the assets/add/dns.php file. Recommendations For DomainMOD versions prior to 4.12, update to version 4.12 or later to resolve...