DirectAdmin Multiple Cross Site Scription

2006.11.21
Credit: Aria-Security Team
Risk: Low
Local: No
Remote: Yes
CVE: CVE-2006-5983
CWE: CWE-Other


CVSS Base Score: 6/10
Impact Subscore: 6.4/10
Exploitability Subscore: 6.8/10
Exploit range: Remote
Attack complexity: Medium
Authentication: Single time
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

#Aria-Security Team Advisory #<www.Aria-security.Com For English > #<www.Aria-Security.net For Persian > #Original Advisory : http://aria-security.net/advisory/directadmin.txt #----------------------------------------------------------- #Software: DirectAdmin V1.28.1 #DirectAdmin level used : Admin level #PoC: http://target:2222/CMD_SHOW_RESELLER?userXSS http://target:2222/CMD_SHOW_USER?user=XSS #DirectAdmin level used : User Level #PoC: http://target:2222/CMD_TICKET_CREATE?TYPE=XSS http://target:2222/CMD_EMAIL_FORWARDER_MODIFY?DOMAIN=demo.com&user=XSS http://target:2222/CMD_TICKET?action=view&number=000000044&type=XSS http://tareget:2222/CMD_EMAIL_VACATION_MODIFY?DOMAIN=demo.com&user=XSS http://target:2222/CMD_EMAIL_LIST?action=view&DOMAIN=demo.com&name=XSS http://target:2222/CMD_FTP_SHOW?DOMAIN=demo.com&user=XSS #DirectAdmin level used : Reseller http://target:2222/CMD_SHOW_USER?user=XSS # #P.S : Attacker must be authenticated # #Contact: Advisory (at) aria-security (dot) net [email concealed]


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top