CVE-2024-48624 | Medium | 5.3 | 2024-10-15 | In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS) vulner… |
CVE-2024-48623 | Medium | 5.3 | 2024-10-15 | In queue\index.php of DomainMOD below v4.12.0, the list_id and domain_id parameters in the GET request can be exploited to cause a reflected Cross Site Scripti… |
CVE-2024-48622 | Medium | 6.6 | 2024-10-15 | A cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit.php and the cdfid… |
CVE-2020-20990 | Medium | 5.4 | 2021-08-12 | A cross site scripting (XSS) vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via… |
CVE-2020-20989 | Medium | 4.3 | 2021-08-12 | A cross-site request forgery (CSRF) in /admin/maintenance/ of Domainmod 4.13 allows attackers to arbitrarily delete logs. |
CVE-2020-20988 | Medium | 5.4 | 2021-08-12 | A cross site scripting (XSS) vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or H… |
CVE-2020-35358 | Critical | 9.8 | 2021-03-15 | DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, both sessions using the changed password a… |
CVE-2019-9080 | High | 7.5 | 2020-10-20 | DomainMOD before 4.14.0 uses MD5 without a salt for password storage. |
CVE-2020-12735 | Critical | 9.8 | 2020-05-08 | reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover. |
CVE-2019-15811 | Medium | 6.1 | 2019-08-29 | In DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month.php has XSS. |
CVE-2019-1010096 | High | 8.8 | 2019-07-18 | DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change the read-only user to admin… |
CVE-2019-1010095 | High | 8.8 | 2019-07-18 | DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can add the administrator account. The c… |
CVE-2019-1010094 | High | 8.8 | 2019-07-18 | domainmod v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change admin password. The component… |
CVE-2018-1000856 | Medium | 4.8 | 2018-12-20 | DomainMOD version 4.09.03 and above. Also verified in the latest version 4.11.01 contains a Cross Site Scripting (XSS) vulnerability in Segment Name field in t… |
CVE-2018-20011 | Medium | 4.8 | 2018-12-10 | DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field. |
CVE-2018-20010 | Medium | 4.8 | 2018-12-10 | DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field. |
CVE-2018-20009 | Medium | 4.8 | 2018-12-10 | DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field. |
CVE-2018-19915 | Medium | 4.8 | 2018-12-06 | DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field. |
CVE-2018-19914 | Medium | 4.8 | 2018-12-06 | DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field. |
CVE-2018-19913 | Medium | 4.8 | 2018-12-06 | DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field. |
CVE-2018-19892 | Medium | 4.8 | 2018-12-06 | DomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php DisplayName, HostName, or UserName field. |
CVE-2018-19752 | Medium | 4.8 | 2018-11-29 | DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar. |
CVE-2018-19751 | Medium | 4.8 | 2018-11-29 | DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields. |
CVE-2018-19750 | Medium | 5.4 | 2018-11-29 | DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields. |
CVE-2018-19749 | Medium | 4.8 | 2018-11-29 | DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field. |
CVE-2018-19137 | Medium | 6.1 | 2018-11-09 | DomainMOD through 4.11.01 has XSS via the assets/edit/ip-address.php ipid parameter. |
CVE-2018-19136 | Medium | 6.1 | 2018-11-09 | DomainMOD through 4.11.01 has XSS via the assets/edit/registrar-account.php raid parameter. |
CVE-2018-11559 | Medium | 5.4 | 2018-05-30 | DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_last_name parameter. |
CVE-2018-11558 | Medium | 5.4 | 2018-05-30 | DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_first_name parameter. |
CVE-2018-11404 | Medium | 6.1 | 2018-05-24 | DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter. |
CVE-2018-11403 | Medium | 5.4 | 2018-05-24 | DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter. |