Lucene search
+L

17 matches found

Positive Technologies
Positive Technologies
•added 2024/03/01 12:00 a.m.•6 views

PT-2024-18701

Name of the Vulnerable Software and Affected Versions CodeAstro House Rental Management System version 1.0 Description A problematic issue has been found in the system, affecting some unknown functionality of the files booking.php, owner.php, and tenant.php. This issue leads to missing...

7.5CVSS0.00918EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/01 12:00 a.m.•9 views

CVE-2024-2076: Missing Authentication for Critical Function

A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file booking.php/owner.php/tenant.php. The manipulation leads to missing authentication. The attack may be launched remotely. Th...

7.5CVSS5.2AI score0.00918EPSS
SaveExploits0References2
Mend
Mend
•added 2021/08/12 9:07 p.m.•5 views

CVE-2020-20988

A cross site scripting XSS vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "or Expiring Between" parameter...

5.4CVSS0.01331EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/08/12 12:00 a.m.•6 views

PT-2021-10568

Name of the Vulnerable Software and Affected Versions: Domainmod version 4.13 Description: A cross-site scripting XSS issue exists in the /domains/cost-by-owner.php component, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload in the or Expiring Between parameter...

5.4CVSS0.01331EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/12 12:00 a.m.•9 views

CVE-2020-20988: Improper Neutralization of Input During Web Page Generation

A cross site scripting XSS vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "or Expiring Between" parameter...

5.4CVSS5.6AI score0.01331EPSS
SaveExploits1References2
NVD
NVD
•added 2018/11/29 10:29 p.m.•37 views

CVE-2018-19749

DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field...

4.8CVSS4.9AI score0.03316EPSS
SaveExploits6References2
osv_cve
osv_cve
•added 2018/11/29 10:29 p.m.•26 views

CVE-2018-19749

DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field...

4.8CVSS5.7AI score
SaveExploits0References2
Mend
Mend
•added 2018/11/29 10:00 p.m.•9 views

CVE-2018-19749

DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field...

4.8CVSS0.03316EPSS
SaveExploits6References2
Positive Technologies
Positive Technologies
•added 2018/11/29 12:00 a.m.•6 views

PT-2018-15065

Name of the Vulnerable Software and Affected Versions DomainMOD versions prior to 4.11.02 Description The issue allows for XSS via the Owner name field in the assets/add/account-owner.php page. Recommendations For DomainMOD versions prior to 4.11.02, update to version 4.11.02 or later to resolve...

4.8CVSS0.03316EPSS
SaveExploits6References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/29 12:00 a.m.•8 views

CVE-2018-19749: Improper Neutralization of Input During Web Page Generation

DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field...

4.8CVSS6.1AI score0.03316EPSS
SaveExploits6References2
zdt
zdt
•added 2018/05/29 12:00 a.m.•59 views

DomainMod 4.09.03 - oid Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter Exploit Author: longer(email protected) Vendor Homepage: domainmod https://github.com/domainmod/domainmod Software Link: domainmod...

5.7AI score0.01732EPSS
SaveExploits5
exploitpack
exploitpack
•added 2018/05/28 12:00 a.m.•73 views

DomainMod 4.09.03 - oid Cross-Site Scripting

DomainMod 4.09.03 - oid Cross-Site Scripting Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter Date: 2018-05-28 Exploit Author: longer([email protected]) Vendor Homepage: domainmod https://github.com/domainmod/domainmod Software Link: domainmod...

3.5CVSS5.5AI score0.01732EPSS
SaveExploits5
NVD
NVD
•added 2018/05/24 7:29 a.m.•34 views

CVE-2018-11403

DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...

5.4CVSS5.3AI score0.01732EPSS
SaveExploits5References2
Prion
Prion
•added 2018/05/24 7:29 a.m.•35 views

Design/Logic Flaw

DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...

3.5CVSS5.2AI score0.01732EPSS
SaveExploits5References2Affected Software1
Mend
Mend
•added 2018/05/24 7:00 a.m.•7 views

CVE-2018-11403

DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...

5.4CVSS0.01732EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/24 12:00 a.m.•7 views

CVE-2018-11403: Improper Neutralization of Input During Web Page Generation

DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter...

5.4CVSS5.9AI score0.01732EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2018/05/24 12:00 a.m.•5 views

PT-2018-10548

Name of the Vulnerable Software and Affected Versions DomainMod version 4.09.03 Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the oid parameter of the "assets/edit/account-owner.php"...

5.4CVSS0.01732EPSS
SaveExploits5References4
Rows per page
Query Builder