Vulnerabilities > Domainmod > Domainmod > 4.10.0

DATE CVE VULNERABILITY TITLE RISK
2018-12-06 CVE-2018-19914 Cross-site Scripting vulnerability in Domainmod
DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field.
network
domainmod CWE-79
3.5
2018-12-06 CVE-2018-19913 Cross-site Scripting vulnerability in Domainmod
DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field.
network
domainmod CWE-79
3.5
2018-12-06 CVE-2018-19892 Cross-site Scripting vulnerability in Domainmod
DomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php DisplayName, HostName, or UserName field.
network
domainmod CWE-79
3.5
2018-11-29 CVE-2018-19752 Cross-site Scripting vulnerability in Domainmod
DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.
network
domainmod CWE-79
3.5
2018-11-29 CVE-2018-19751 Cross-site Scripting vulnerability in Domainmod
DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields.
network
domainmod CWE-79
3.5
2018-11-29 CVE-2018-19750 Cross-site Scripting vulnerability in Domainmod
DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields.
network
domainmod CWE-79
3.5
2018-11-29 CVE-2018-19749 Cross-site Scripting vulnerability in Domainmod
DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field.
network
domainmod CWE-79
3.5
2018-11-09 CVE-2018-19137 Cross-site Scripting vulnerability in Domainmod
DomainMOD through 4.11.01 has XSS via the assets/edit/ip-address.php ipid parameter.
network
domainmod CWE-79
4.3
2018-11-09 CVE-2018-19136 Cross-site Scripting vulnerability in Domainmod
DomainMOD through 4.11.01 has XSS via the assets/edit/registrar-account.php raid parameter.
network
domainmod CWE-79
4.3
2018-05-30 CVE-2018-11559 Cross-site Scripting vulnerability in Domainmod 4.10.0
DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_last_name parameter.
network
domainmod CWE-79
3.5