Sploitus

30 exploited vulnerabilities in Domainmod

Vulnerabilities with publicly known exploits

Vendors
Domainmod
With known exploits
30
Affected Domainmod versions
≤ 4.13.0, 4.11.01, 4.09.03

Vulnerabilities with exploits

Highest CVSS first — 15 of these already have exploit code on Sploitus

CVE-2020-35358
CVSS 9.8 CRITICAL 2021-03-15
CVE-2020-12735
CVSS 9.8 CRITICAL 2020-05-08FIX AVAILABLE
CVE-2019-1010096
CVSS 8.8 HIGH 2019-07-18
CVE-2019-1010095
CVSS 8.8 HIGH 2019-07-18
CVE-2019-1010094
CVSS 8.8 HIGH 2019-07-18FIX AVAILABLE
CVE-2024-48622
CVSS 6.6 MEDIUM 2024-10-15FIX AVAILABLE
CVE-2019-15811 4 exploits
CVSS 6.1 MEDIUM 2019-08-29FIX AVAILABLE
DomainMod 4.13 - Cross-Site ScriptingDomainMod 4.13 Cross Site Scripting
CVE-2018-19137
CVSS 6.1 MEDIUM 2018-11-09FIX AVAILABLE
CVE-2018-19136 4 exploits
CVSS 6.1 MEDIUM 2018-11-09FIX AVAILABLE
DomainMOD 4.11.01 - Cross-Site Scripting VulnerabilityDomainMOD 4.11.01 - 'raid' Cross-Site Scripting
CVE-2018-11404 4 exploits
CVSS 6.1 MEDIUM 2018-05-24FIX AVAILABLE
DomainMod 4.09.03 - sslpaid Cross-Site Scripting VulnerabilityDomainMod 4.09.03 Cross Site Scripting
CVE-2020-20990
CVSS 5.4 MEDIUM 2021-08-12
CVE-2020-20988
CVSS 5.4 MEDIUM 2021-08-12
CVE-2018-19750 5 exploits
CVSS 5.4 MEDIUM 2018-11-29FIX AVAILABLE
DomainMOD 4.11.01 Custom Domain Cross Site ScriptingDomainMOD 4.11.01 Cross Site Scripting
CVE-2018-11559
CVSS 5.4 MEDIUM 2018-05-30FIX AVAILABLE
CVE-2018-11558
CVSS 5.4 MEDIUM 2018-05-30FIX AVAILABLE
CVE-2018-11403 4 exploits
CVSS 5.4 MEDIUM 2018-05-24FIX AVAILABLE
DomainMod 4.09.03 - oid Cross-Site Scripting VulnerabilityDomainMod 4.09.03 - 'oid' Cross-Site Scripting
CVE-2024-48624
CVSS 5.3 MEDIUM 2024-10-15FIX AVAILABLE
CVE-2024-48623
CVSS 5.3 MEDIUM 2024-10-15FIX AVAILABLE
CVE-2018-20011 5 exploits
CVSS 4.8 MEDIUM 2018-12-10
DomainMOD 4.11.01 category.php Cross Site ScriptingDomainMOD 4.11.01 - (category.php CatagoryName, StakeHolder) Cross-Site Scripting Vulnerability
CVE-2018-20010 4 exploits
CVSS 4.8 MEDIUM 2018-12-10FIX AVAILABLE
DomainMOD 4.11.01 ssl-accounts.php Cross Site ScriptingDomainMOD 4.11.01 - ssl-accounts.php username Cross-Site Scripting Vulnerability
CVE-2018-20009 5 exploits
CVSS 4.8 MEDIUM 2018-12-10FIX AVAILABLE
DomainMOD 4.11.01 ssl-provider-name Cross Site ScriptingDomainMOD 4.11.01 - ssl-provider-name Cross-Site Scripting Vulnerability
CVE-2018-19915 4 exploits
CVSS 4.8 MEDIUM 2018-12-06FIX AVAILABLE
DomainMOD 4.11.01 - (assets/edit/host.php?whid=5) Cross-Site Scripting VulnerabilityDomainMOD 4.11.01 Cross Site Scripting
CVE-2018-19914 4 exploits
CVSS 4.8 MEDIUM 2018-12-06FIX AVAILABLE
DomainMOD 4.11.01 - (assets/add/dns.php) Cross-Site Scripting VulnerabilityDomainMOD 4.11.01 Cross Site Scripting
CVE-2018-19913 4 exploits
CVSS 4.8 MEDIUM 2018-12-06FIX AVAILABLE
DomainMOD 4.11.01 registrar-accounts.php Cross Site ScriptingDomainMOD 4.11.01 - Cross-Site Scripting Vulnerability
CVE-2018-19892 4 exploits
CVSS 4.8 MEDIUM 2018-12-06FIX AVAILABLE
DomainMOD 4.11.01 DisplayName Cross Site ScriptingDomainMOD 4.11.01 - DisplayName Cross-Site Scripting Vulnerability
CVE-2018-19752 5 exploits
CVSS 4.8 MEDIUM 2018-11-29FIX AVAILABLE
DomainMOD 4.11.01 Registrar Cross Site ScriptingDomainMOD 4.11.01 Cross Site Scripting
CVE-2018-19751 5 exploits
CVSS 4.8 MEDIUM 2018-11-29FIX AVAILABLE
DomainMOD 4.11.01 Custom SSL Fields Cross Site ScriptingDomainMOD 4.11.01 Cross Site Scripting
CVE-2018-19749 5 exploits
CVSS 4.8 MEDIUM 2018-11-29FIX AVAILABLE
DomainMOD 4.11.01 Owner Name Cross Site ScriptingDomainMOD 4.11.01 Cross Site Scripting
CVE-2018-1000856
CVSS 4.8 MEDIUM 2018-12-20
CVE-2020-20989
CVSS 4.3 MEDIUM 2021-08-12