CVE-2018-11404

DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter.

• CWE-79

• https://github.com/domainmod/domainmod/issues/63Issue Tracking, Third Party Advisory
• https://www.exploit-db.com/exploits/44783/Exploit, Third Party Advisory, VDB Entry
• https://github.com/domainmod/domainmod/issues/63Issue Tracking, Third Party Advisory
• https://www.exploit-db.com/exploits/44783/Exploit, Third Party Advisory, VDB Entry

Published

May 24, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11399SimpliSafe Original has Unencrypted Sensor Transmissions, wh…
• CVE-2018-1140A missing input sanitization flaw was found in the implement…6.5
• CVE-2018-11400In SimpliSafe Original, the Base Station fails to detect tam…
• CVE-2018-11401In SimpliSafe Original, RF Interference (e.g., an extremely …
• CVE-2018-11402SimpliSafe Original has Unencrypted Keypad Transmissions, wh…
• CVE-2018-11403DomainMod v4.09.03 has XSS via the assets/edit/account-owner…
• CVE-2018-11405Kliqqi 2.0.2 has CSRF in admin/admin_users.php.
• CVE-2018-11406An issue was discovered in the Security component in Symfony…
• CVE-2018-11407An issue was discovered in the Ldap component in Symfony 2.8…
• CVE-2018-11408The security handlers in the Security component in Symfony i…
• CVE-2018-11409Splunk through 7.0.1 allows information disclosure by append…
• CVE-2018-1141When installing Nessus to a directory outside of the default…