Infinitumit: >> Directadmin >> 1.561 Security Vulnerabilities
The FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD_FILE_MANAGER, CMD_SHOW_USER, and CMD_SHOW_RESELLER; an attacker can bypass the CSRF protection with this, and take over the administration panel.
CVSS Score
8.8
EPSS Score
0.04
Published
2019-04-30