| Package | Affected versions | Patched versions |
|---|---|---|
| directadmin | ≤ 1.561 |
The FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD_FILE_MANAGER, CMD_SHOW_USER, and CMD_SHOW_RESELLER; an attacker can bypass the CSRF protection with this, and take over the administration panel.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free