EUVD-2018-10849

Malware in sbrugna...

Default credentials

DomainMOD through 4.11.01 has XSS via the assets/edit/ip-address.php ipid parameter...

CVE-2018-19137

DomainMOD 4.11.01 is vulnerable to a reflected cross-site scripting (XSS) flaw in assets/edit/ip-address.php via the ipid parameter. Successful exploitation could allow injected JavaScript to run in the victim’s browser, enabling session hijacking or page defacement. The issue stems from improper...