Unscored CVE-2012-3842 EUVD-2012-3789GHSA-43g2-2w55-rgfp

Multiple cross-site scripting (XSS) vulnerabilities in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allow remote authenticated users with …

Published Jul 3, 2012 · Updated Sep 16, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via the (1) select0 or (2) select8 parameters.

References

53281 vdb-entry
http://www.vulnerability-lab.com/get_content.php?id=509
20120426 DirectAdmin v1.403 - Multiple Cross Site Vulnerabilities mailing-list