PT-2012-5038 · Jbmc · Directadmin

Dawid Golak · Publicado 2012-07-03 · Atualizado 2025-12-05 · CVE-2012-3842

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions JBMC Software DirectAdmin version 1.403

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the CMD DOMAIN component. These vulnerabilities allow remote authenticated users with specific privileges to inject arbitrary web script or HTML. The injection can occur via the select0 or select8 parameters.

Recommendations For version 1.403, consider restricting access to the CMD DOMAIN component until a patch is available. As a temporary workaround, avoid using the select0 and select8 parameters in the affected API endpoint.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-3842

Produtos afetados

Directadmin

Referências · 7

• 🔥 http://securityfocus.com/bid/53281 · Exploit
• 🔥 http://vulnerability-lab.com/get_content.php?id=509 · Exploit
• https://t.me/cveNotify/144939 · Publicação no Telegram
• https://t.me/cveNotify/144921 · Publicação no Telegram
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3842 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-3842 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0214.html · Nota