Vulnerabilities (CVE)

Filtered by vendor Domainmod Subscribe
Total 28 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-19752 1 Domainmod 1 Domainmod 2018-12-21 3.5 LOW 4.8 MEDIUM
DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.
CVE-2018-19913 1 Domainmod 1 Domainmod 2018-12-21 3.5 LOW 4.8 MEDIUM
DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field.
CVE-2018-19136 1 Domainmod 1 Domainmod 2018-12-11 4.3 MEDIUM 6.1 MEDIUM
DomainMOD through 4.11.01 has XSS via the assets/edit/registrar-account.php raid parameter.
CVE-2018-19137 1 Domainmod 1 Domainmod 2018-12-11 4.3 MEDIUM 6.1 MEDIUM
DomainMOD through 4.11.01 has XSS via the assets/edit/ip-address.php ipid parameter.
CVE-2018-11559 1 Domainmod 1 Domainmod 2018-11-29 3.5 LOW 5.4 MEDIUM
DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_last_name parameter.
CVE-2018-11558 1 Domainmod 1 Domainmod 2018-11-29 3.5 LOW 5.4 MEDIUM
DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_first_name parameter.
CVE-2018-11403 1 Domainmod 1 Domainmod 2018-06-25 3.5 LOW 5.4 MEDIUM
DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter.
CVE-2018-11404 1 Domainmod 1 Domainmod 2018-06-22 4.3 MEDIUM 6.1 MEDIUM
DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter.