DomainMOD 4.11.01 ssl-provider-name Cross Site Scripting

Exploit Title : DomainMOD 4.11.01 and before - 'ssl-provider-name' Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 14-02-2019 Vendor Homepage : https://domainmod.org/ Software Information Link : https://github.com/DomainMod/DomainMod...

Default credentials

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field...

CVE-2018-20009

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field...

CVE-2018-20009: Improper Neutralization of Input During Web Page Generation

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field...

PT-2018-15233

Name of the Vulnerable Software and Affected Versions DomainMOD version 4.11.01 Description The issue allows for XSS via the "SSL Provider Name" or "SSL Provider URL" field in the assets/add/ssl-provider.php page. Recommendations For DomainMOD version 4.11.01, update to a newer version that...