EDB-46374

functional

DomainMOD 4.11.01 - 'category.php CatagoryName_ StakeHolder' Cross-Site Scripting

view exploit source exploit_dbverifiedtype webappsauthor Mohammed Abdul Raheempublished 2019-02-14catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-20011USmedium4.8Exploit
DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan