Researchers
Back
Mohammed Abdul Raheem
#8177
of 60,590
39
Total CVSS
Vulnerabilities
·
8
Medium
8
PT-2018-15233
2018-12-10
4.8
CVE-2018-20009
Domainmod
Domainmod
The issue allows for XSS via the "SSL Provider Name" or "SSL Provider URL" field in the assets/add/ssl-provider.php page.
PT-2018-15235
2018-12-10
4.8
CVE-2018-20011
Domainmod
Domainmod
The issue is related to XSS via the `assets/add/category.php` endpoint, specifically through the `Category Name` or `Stakeholder` field.
PT-2018-15234
2018-12-10
4.8
CVE-2018-20010
Domainmod
Domainmod
The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the `username` field of the "assets/add/ssl-provider-account.php" endpoint.
PT-2018-15160
2018-12-06
4.8
CVE-2018-19913
Domainmod
Domainmod
The issue allows for XSS attacks via the `UserName`, `Reseller ID`, or `notes` field in the `assets/add/registrar-accounts.php` page.
PT-2018-15065
2018-11-29
4.8
CVE-2018-19749
Domainmod
Domainmod
The issue allows for XSS via the `Owner name` field in the `assets/add/account-owner.php` page.
PT-2018-15068
2018-11-29
4.8
CVE-2018-19752
Domainmod
Domainmod
The issue allows for XSS via the `notes` field for the Registrar in the `assets/add/registrar.php` page.
PT-2018-15067
2018-11-29
4.8
CVE-2018-19751
Domainmod
Domainmod
The issue allows for XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields.
PT-2018-15066
2018-11-29
5.4
CVE-2018-19750
Domainmod
Domainmod
The issue allows for XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields.