EDB-45946

PoC

DomainMOD 4.11.01 - Custom Domain Fields Cross-Site Scripting

view exploit source exploit_dbtype webappsauthor Mohammed Abdul Raheempublished 2018-12-04catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-19750USmedium5.4Exploit
DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan