Domainmod · Domainmod · CVE-2018-11403
**Name of the Vulnerable Software and Affected Versions**
DomainMod version 4.09.03
**Description**
The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the `oid` parameter of the "assets/edit/account-owner.php" endpoint.
**Recommendations**
For DomainMod version 4.09.03, avoid using the `oid` parameter in the "assets/edit/account-owner.php" endpoint until the issue is resolved. As a temporary workaround, consider validating and sanitizing all input to the `oid` parameter to prevent malicious code injection.