Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Longer

#21281of 53,624
11.5Total CVSS
Vulnerabilities · 2
Medium
2
PT-2018-10548
5.4
2018-05-24
Domainmod · Domainmod · CVE-2018-11403
**Name of the Vulnerable Software and Affected Versions** DomainMod version 4.09.03 **Description** The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the `oid` parameter of the "assets/edit/account-owner.php" endpoint. **Recommendations** For DomainMod version 4.09.03, avoid using the `oid` parameter in the "assets/edit/account-owner.php" endpoint until the issue is resolved. As a temporary workaround, consider validating and sanitizing all input to the `oid` parameter to prevent malicious code injection.
PT-2018-10549
6.1
2018-05-24
Domainmod · Domainmod · CVE-2018-11404
**Name of the Vulnerable Software and Affected Versions** DomainMod version 4.09.03 **Description** The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the `sslpaid` parameter of the "assets/edit/ssl-provider-account.php" endpoint. **Recommendations** For DomainMod version 4.09.03, as a temporary workaround, consider restricting access to the "assets/edit/ssl-provider-account.php" endpoint until a patch is available. Avoid using the `sslpaid` parameter in this endpoint until the issue is resolved.