EDB-46372

functional

DomainMOD 4.11.01 - 'ssl-provider-name' Cross-Site Scripting

view exploit source exploit_dbverifiedtype webappsauthor Mohammed Abdul Raheempublished 2019-02-14catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-20009USmedium4.8Exploit
DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan