CVE-2020-20988

概要

参考情報

• mycvee.blogspot.com/p/xss2.html · Exploit

domainmod のその他の脆弱性

• CVE-2024-48624中 5.3In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scr…
• CVE-2024-48623中 5.3In queue\index.php of DomainMOD below v4.12.0, the list_id and domain_id parameters in the GET request can be exploited to cause a reflected…
• CVE-2024-48622中 6.6A cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit…
• CVE-2020-20990中 5.4A cross site scripting (XSS) vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web s…
• CVE-2020-20989中 4.3A cross-site request forgery (CSRF) in /admin/maintenance/ of Domainmod 4.13 allows attackers to arbitrarily delete logs.