CVE-2018-10097

XSS exists in Domain Trader 2.5.3 via the recoverlogin.php emailaddress parameter...

CVE-2018-10097

XSS exists in Domain Trader 2.5.3 via the recoverlogin.php emailaddress parameter...

Cross site scripting

XSS exists in Domain Trader 2.5.3 via the recoverlogin.php emailaddress parameter...

CVE-2018-10097

CVE-2018-10097 describes a cross-site scripting vulnerability in Domain Trader version 2.5.3, exploitable via the recoverlogin.php email_address parameter. The issue is a client-side/script injection flaw in that input parameter, enabling arbitrary script/HTML to be injected when processed by the...

PT-2018-9678

Name of the Vulnerable Software and Affected Versions: Domain Trader version 2.5.3 Description: A security issue exists due to the presence of XSS in the recoverlogin.php file, specifically via the email address parameter. Recommendations: For Domain Trader version 2.5.3, consider restricting...

CVE-2018-10097: Improper Neutralization of Input During Web Page Generation

XSS exists in Domain Trader 2.5.3 via the recoverlogin.php emailaddress parameter...

rollingdomains.com XSS vulnerability

Open Bug Bounty ID: OBB-569478 Description| Value ---|--- Affected Website:| rollingdomains.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Domaintrader Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...