Domainmod vulnerabilities

Products

• Domainmod 31

Newest

• domainmod In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be... CVE-2024-48624 5.3 MediumOctober 15, 2024
• domainmod In queue\index.php of DomainMOD below v4.12.0, the list_id and domain_id parameters in the GET... CVE-2024-48623 5.3 MediumOctober 15, 2024
• domainmod A cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject... CVE-2024-48622 6.6 MediumOctober 15, 2024
• domainmod A cross site scripting (XSS) vulnerability in the /segments/edit.php component of Domainmod 4.13... CVE-2020-20990 5.4 MediumAugust 12, 2021
• domainmod A cross-site request forgery (CSRF) in /admin/maintenance/ of Domainmod 4.13 allows attackers to... CVE-2020-20989 4.3 MediumAugust 12, 2021
• domainmod A cross site scripting (XSS) vulnerability in the /domains/cost-by-owner.php component of... CVE-2020-20988 5.4 MediumAugust 12, 2021
• domainmod DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On... CVE-2020-35358 9.8 CriticalMarch 15, 2021
• domainmod DomainMOD before 4.14.0 uses MD5 without a salt for password storage. CVE-2019-9080 7.5 HighOctober 20, 2020
• domainmod reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to... CVE-2020-12735 9.8 CriticalMay 8, 2020
• domainmod In DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month... CVE-2019-15811 Public exploit 6.1 MediumAugust 29, 2019
• domainmod domainmod(https://domainmod.org/) domainmod v4.10.0 is affected by: Cross Site Request Forgery ... CVE-2019-1010096 8.8 HighJuly 18, 2019
• domainmod domainmod(https://domainmod.org/) domainmod v4.10.0 is affected by: Cross Site Request Forgery ... CVE-2019-1010095 8.8 HighJuly 18, 2019
• domainmod domainmod v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a... CVE-2019-1010094 8.8 HighJuly 18, 2019
• domainmod DomainMOD version 4.09.03 and above. Also verified in the latest version 4.11.01 contains a Cross... CVE-2018-1000856 4.8 MediumDecember 20, 2018
• domainmod DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field. CVE-2018-20011 Public exploit 4.8 MediumDecember 10, 2018
• domainmod DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field. CVE-2018-20010 Public exploit 4.8 MediumDecember 10, 2018
• domainmod DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider... CVE-2018-20009 Public exploit 4.8 MediumDecember 10, 2018
• domainmod DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field. CVE-2018-19915 Public exploit 4.8 MediumDecember 6, 2018
• domainmod DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field. CVE-2018-19914 Public exploit 4.8 MediumDecember 6, 2018
• domainmod DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID... CVE-2018-19913 Public exploit 4.8 MediumDecember 6, 2018
• domainmod DomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php DisplayName, HostName, or... CVE-2018-19892 4.8 MediumDecember 6, 2018
• domainmod DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar. CVE-2018-19752 Public exploit 4.8 MediumNovember 29, 2018
• domainmod DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL... CVE-2018-19751 Public exploit 4.8 MediumNovember 29, 2018
• domainmod DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field... CVE-2018-19750 Public exploit 5.4 MediumNovember 29, 2018
• domainmod DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field. CVE-2018-19749 Public exploit 4.8 MediumNovember 29, 2018
• domainmod DomainMOD through 4.11.01 has XSS via the assets/edit/ip-address.php ipid parameter. CVE-2018-19137 6.1 MediumNovember 9, 2018
• domainmod DomainMOD through 4.11.01 has XSS via the assets/edit/registrar-account.php raid parameter. CVE-2018-19136 Public exploit 6.1 MediumNovember 9, 2018
• domainmod DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_last_name parameter. CVE-2018-11559 5.4 MediumMay 30, 2018
• domainmod DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_first_name parameter. CVE-2018-11558 5.4 MediumMay 30, 2018
• domainmod DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter. CVE-2018-11404 Public exploit 6.1 MediumMay 24, 2018
• domainmod DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter. CVE-2018-11403 Public exploit 5.4 MediumMay 24, 2018