CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
A cross site scripting (XSS) vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter. |
| 12/08/2021 |
| CVE-2020-20989 | 中危4.3 | A cross-site request forgery (CSRF) in /admin/maintenance/ of Domainmod 4.13 allows attackers to arbitrarily delete logs. | 12/08/2021 |
| CVE-2020-20988 | 中危5.4 | A cross site scripting (XSS) vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "or Expiring Between" parameter. | 12/08/2021 |
| CVE-2020-35358 | 严重9.8 | DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, both sessions using the changed password and old sessions in any other browser or device do not expire and remain active. Such flaws frequently give attackers unauthorized access to some system data or f | 15/03/2021 |
| CVE-2019-9080 | 高危7.5 | DomainMOD before 4.14.0 uses MD5 without a salt for password storage. | 20/10/2020 |
| CVE-2020-12735 | 严重9.8 | reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover. | 08/05/2020 |
| CVE-2019-15811 | 中危6.1 | In DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month.php has XSS. | 29/08/2019 |
| CVE-2019-1010096 | 高危8.8 | DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change the read-only user to admin. The component is: admin/users/edit.php?uid=2. The attack vector is: After the administrator logged in, open the html page. | 18/07/2019 |
| CVE-2019-1010095 | 高危8.8 | DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can add the administrator account. The component is: admin/users/add.php. The attack vector is: After the administrator logged in, open the html page. | 18/07/2019 |
| CVE-2019-1010094 | 高危8.8 | domainmod v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change admin password. The component is: http://127.0.0.1/settings/password/ http://127.0.0.1/admin/users/add.php http://127.0.0.1/admin/users/edit.php?uid=2. The attack vector is: After the admini | 18/07/2019 |
| CVE-2018-1000856 | 中危4.8 | DomainMOD version 4.09.03 and above. Also verified in the latest version 4.11.01 contains a Cross Site Scripting (XSS) vulnerability in Segment Name field in the segments page that can result in Arbitrary script can be executed on all users browsers who visit the affected page. This attack appear to be exploitable via | 20/12/2018 |
| CVE-2018-20011 | 中危4.8 | DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field. | 10/12/2018 |
| CVE-2018-20010 | 中危4.8 | DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field. | 10/12/2018 |
| CVE-2018-20009 | 中危4.8 | DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field. | 10/12/2018 |
| CVE-2018-19915 | 中危4.8 | DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field. | 06/12/2018 |
| CVE-2018-19914 | 中危4.8 | DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field. | 06/12/2018 |
| CVE-2018-19913 | 中危4.8 | DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field. | 06/12/2018 |