Vulnerability index

Browse CVEs

11 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Domainmod MEDIUM 5.4
CVE-2020-20988

A cross site scripting (XSS) vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitrary web sc…

No fix yet
Fix from $1,600 2021-08-12
Domainmod MEDIUM 5.4
CVE-2020-20990

A cross site scripting (XSS) vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or…

No fix yet
Fix from $1,600 2021-08-12
Domainmod CRITICAL 9.8
CVE-2020-35358

DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, both sessions using the changed …

No fix yet
Fix from $2,300 2021-03-15
Domainmod CRITICAL 9.8
CVE-2020-12735

reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover.

No fix yet
Fix from $2,300 2020-05-08
Domainmod HIGH 8.8
CVE-2019-1010094

domainmod v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change admin password. The…

No fix yet
Fix from $1,950 2019-07-18
Domainmod HIGH 8.8
CVE-2019-1010095

DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can add the administrator acco…

No fix yet
Fix from $1,950 2019-07-18
Domainmod HIGH 8.8
CVE-2019-1010096

DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change the read-only user …

No fix yet
Fix from $1,950 2019-07-18
Domainmod MEDIUM 5.4
CVE-2018-11558

DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_first_name parameter.

No fix yet
Fix from $1,600 2018-05-30
Domainmod MEDIUM 5.4
CVE-2018-11559

DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_last_name parameter.

No fix yet
Fix from $1,600 2018-05-30
Domainmod MEDIUM 6.1
CVE-2018-11404

DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter.

No fix yet
Fix from $1,600 2018-05-24
Domainmod MEDIUM 5.4
CVE-2018-11403

DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter.

No fix yet
Fix from $1,600 2018-05-24