medium4.8Public exploit code
CVE-2018-19915
DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DomainMOD 4.11.01 - 'assets/edit/host.php?whid=5' Cross-Site Scripting2019-02-14 · webapps · php · Verified
Impact
DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Domainmod | Domainmod | from 4.09.03 through 4.11.01 |