DomainMod 4.09.03 - oid Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter Exploit Author: longer（email protected） Vendor Homepage: domainmod https://github.com/domainmod/domainmod Software Link: domainmod...

DomainMod 4.09.03 Cross Site Scripting

Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter Date: 2018-05-28 Exploit Author: longeri1/[email protected]/4 Vendor Homepage: domainmod https://github.com/domainmod/domainmod Software Link: domainmod https://github.com/domainmod/domainmod Version:...

Design/Logic Flaw

DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...

CVE-2018-11403

DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...

CVE-2018-11403

DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...

CVE-2018-11403

CVE-2018-11403 affects DomainMod v4.09.03, with an XSS flaw in assets/edit/account-owner.php using the oid parameter. Root cause: insufficient input sanitization/execution of user-supplied oid enabling script injection. Impact: cross-site scripting in affected sessions; CVSS v3.0 base score 5.4 (...

CVE-2018-11403

DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...

PT-2018-10548

Name of the Vulnerable Software and Affected Versions DomainMod version 4.09.03 Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the oid parameter of the "assets/edit/account-owner.php"...

CVE-2018-11403: Improper Neutralization of Input During Web Page Generation

DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...

SD-WAN SNMP OID

This article will describe how to retrieve OID's from SD-WAN MIB file. As the other 3rd party SNMP tools needs OID to receive alerts from the SD-WAN for monitoring...

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are caused by an operation that goes beyond the buffer boundaries in memory, allowing an attacker to trigger a service failure.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird arise from an operation that goes beyond the buffer boundaries in memory when reading certificates from the disk. Exploiting these vulnerabilities can allow a malicious actor to cause service failures using...

MatrixSSL <= 3.7.2 Multiple Vulnerabilities

MatrixSSL is prone multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2017-1000417

MatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible spoofing of OIDs e.g. in ExtKeyUsage extension on X.509 certificates...

CVE-2017-1000417

MatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible spoofing of OIDs e.g. in ExtKeyUsage extension on X.509 certificates...

CVE-2017-1000417

MatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible spoofing of OIDs e.g. in ExtKeyUsage extension on X.509 certificates...

Spoofing

MatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible spoofing of OIDs e.g. in ExtKeyUsage extension on X.509 certificates...

CVE-2017-1000417

MatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible spoofing of OIDs e.g. in ExtKeyUsage extension on X.509 certificates...

CVE-2017-1000417

MatrixSSL 3.7.2 is affected by a collision-prone OID comparison logic that can allow spoofing of OIDs (such as in the ExtKeyUsage extension) in X.509 certificates. The root cause is the OID comparison logic used by the library. The available connected documents confirm the vulnerability and affec...

PT-2018-5193

Name of the Vulnerable Software and Affected Versions MatrixSSL version 3.7.2 Description The issue arises from a collision-prone OID comparison logic in MatrixSSL, which can lead to possible spoofing of OIDs, such as those in the ExtKeyUsage extension, on X.509 certificates. Recommendations For...

CVE-2017-1000417: Improper Certificate Validation

MatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible spoofing of OIDs e.g. in ExtKeyUsage extension on X.509 certificates...