İçeriğe atla
Noroxi

DomainMOD kayıtları

domainmod üreticisine ait 31 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

31 kayıt
  • CVE-2020-35358
    40Planlayın

    DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %2

    domainmod · domainmod15 Mar 2021

  • CVE-2020-12735
    40Planlayın

    reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover.

    KritikCVSS 9,8İstismar yokEPSS %2

    domainmod · domainmod8 May 2020

  • CVE-2019-1010095
    35İzleyin

    DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF).

    YüksekCVSS 8,8İstismar yokEPSS %1

    domainmod · domainmod18 Tem 2019

  • CVE-2019-1010096
    35İzleyin

    DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF).

    YüksekCVSS 8,8İstismar yokEPSS %1

    domainmod · domainmod18 Tem 2019

  • CVE-2019-1010094
    35İzleyin

    domainmod v4.10.0 is affected by: Cross Site Request Forgery (CSRF).

    YüksekCVSS 8,8İstismar yokEPSS %1

    domainmod · domainmod18 Tem 2019

  • CVE-2019-9080
    30İzleyin

    DomainMOD before 4.14.0 uses MD5 without a salt for password storage.

    YüksekCVSS 7,5İstismar yokEPSS %1

    domainmod · domainmod20 Eki 2020

  • CVE-2019-15811
    26İzleyin

    In DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month.php has XSS.

    OrtaCVSS 6,1Kavram kanıtıEPSS %7

    domainmod · domainmod29 Ağu 2019

  • CVE-2018-19136
    26İzleyin

    DomainMOD through 4.11.01 has XSS via the assets/edit/registrar-account.php raid parameter.

    OrtaCVSS 6,1Kavram kanıtıEPSS %7

    domainmod · domainmod9 Kas 2018

  • CVE-2024-48622
    26İzleyin

    A cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit

    OrtaCVSS 6,6İstismar yokEPSS %0

    domainmod · domainmod15 Eki 2024

  • CVE-2018-19137
    25İzleyin

    DomainMOD through 4.11.01 has XSS via the assets/edit/ip-address.php ipid parameter.

    OrtaCVSS 6,1Kavram kanıtıEPSS %3

    domainmod · domainmod9 Kas 2018

  • CVE-2018-11404
    25İzleyin

    DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter.

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    domainmod · domainmod24 May 2018

  • CVE-2018-19750
    22İzleyin

    DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields.

    OrtaCVSS 5,4Kavram kanıtıEPSS %2

    domainmod · domainmod29 Kas 2018

  • CVE-2018-11403
    22İzleyin

    DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter.

    OrtaCVSS 5,4Kavram kanıtıEPSS %2

    domainmod · domainmod24 May 2018

  • CVE-2020-20988
    21İzleyin

    A cross site scripting (XSS) vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitra

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    domainmod · domainmod12 Ağu 2021

  • CVE-2018-11559
    21İzleyin

    DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_last_name parameter.

    OrtaCVSS 5,4İstismar yokEPSS %1

    domainmod · domainmod30 May 2018

  • CVE-2018-11558
    21İzleyin

    DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_first_name parameter.

    OrtaCVSS 5,4İstismar yokEPSS %1

    domainmod · domainmod30 May 2018

  • CVE-2020-20990
    21İzleyin

    A cross site scripting (XSS) vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web s

    OrtaCVSS 5,4İstismar yokEPSS %1

    domainmod · domainmod12 Ağu 2021

  • CVE-2024-48623
    21İzleyin

    In queue\index.php of DomainMOD below v4.12.0, the list_id and domain_id parameters in the GET request can be exploited to cause a reflected

    OrtaCVSS 5,3İstismar yokEPSS %0

    domainmod · domainmod15 Eki 2024

  • CVE-2024-48624
    21İzleyin

    In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scr

    OrtaCVSS 5,3İstismar yokEPSS %0

    domainmod · domainmod15 Eki 2024

  • CVE-2018-20009
    20İzleyin

    DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field.

    OrtaCVSS 4,8Kavram kanıtıEPSS %4

    domainmod · domainmod10 Ara 2018

  • CVE-2018-20010
    20İzleyin

    DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field.

    OrtaCVSS 4,8Kavram kanıtıEPSS %4

    domainmod · domainmod10 Ara 2018

  • CVE-2018-20011
    20İzleyin

    DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field.

    OrtaCVSS 4,8Kavram kanıtıEPSS %4

    domainmod · domainmod10 Ara 2018

  • CVE-2018-19915
    20İzleyin

    DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field.

    OrtaCVSS 4,8Kavram kanıtıEPSS %4

    domainmod · domainmod6 Ara 2018

  • CVE-2018-19752
    20İzleyin

    DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.

    OrtaCVSS 4,8Kavram kanıtıEPSS %3

    domainmod · domainmod29 Kas 2018

  • CVE-2018-19914
    20İzleyin

    DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field.

    OrtaCVSS 4,8Kavram kanıtıEPSS %3

    domainmod · domainmod6 Ara 2018