Filtered by vendor Domainmod
Subscriptions
Filtered by product Domainmod
Subscriptions
Total
28 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2018-11559 | 1 Domainmod | 1 Domainmod | 2024-09-17 | N/A |
| DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_last_name parameter. | ||||
| CVE-2018-1000856 | 1 Domainmod | 1 Domainmod | 2024-09-17 | N/A |
| DomainMOD version 4.09.03 and above. Also verified in the latest version 4.11.01 contains a Cross Site Scripting (XSS) vulnerability in Segment Name field in the segments page that can result in Arbitrary script can be executed on all users browsers who visit the affected page. This attack appear to be exploitable via Victim must visit the vulnerable page. This vulnerability appears to have been fixed in No fix yet. | ||||
| CVE-2018-11558 | 1 Domainmod | 1 Domainmod | 2024-09-16 | N/A |
| DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_first_name parameter. | ||||
| CVE-2018-19137 | 1 Domainmod | 1 Domainmod | 2024-09-16 | N/A |
| DomainMOD through 4.11.01 has XSS via the assets/edit/ip-address.php ipid parameter. | ||||
| CVE-2018-20009 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field. | ||||
| CVE-2018-20010 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field. | ||||
| CVE-2018-20011 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field. | ||||
| CVE-2018-19914 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field. | ||||
| CVE-2018-19913 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field. | ||||
| CVE-2018-19915 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field. | ||||
| CVE-2018-19892 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| DomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php DisplayName, HostName, or UserName field. | ||||
| CVE-2018-19750 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields. | ||||
| CVE-2018-19751 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields. | ||||
| CVE-2018-19749 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field. | ||||
| CVE-2018-19752 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar. | ||||
| CVE-2018-19136 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| DomainMOD through 4.11.01 has XSS via the assets/edit/registrar-account.php raid parameter. | ||||
| CVE-2018-11403 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter. | ||||
| CVE-2018-11404 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter. | ||||
| CVE-2019-1010094 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| domainmod v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change admin password. The component is: http://127.0.0.1/settings/password/ http://127.0.0.1/admin/users/add.php http://127.0.0.1/admin/users/edit.php?uid=2. The attack vector is: After the administrator logged in, open the html page. | ||||
| CVE-2019-1010096 | 1 Domainmod | 1 Domainmod | 2024-08-05 | N/A |
| DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change the read-only user to admin. The component is: admin/users/edit.php?uid=2. The attack vector is: After the administrator logged in, open the html page. | ||||