CVE-2012-3842

MEDIUM 4.3CVE-2012-3842 · Published 03/07/2012 · updated 16/06/2026

In short

CVE-2012-3842 is a MEDIUM (CVSS 4.3) vulnerability affecting directadmin (directadmin).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
directadmin directadmin	`= 1.403`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via the (1) select0 or (2) select8 parameters.

References

archives.neohapsis.com/archives/bugtraq/2012-04/0214.html · Broken Link
securityfocus.com/bid/53281 · Exploit
vulnerability-lab.com/get_content.php · Exploit

More vulnerabilities in directadmin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free