CVE-2012-3842

Directadmin - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via the (1) select0 or (2) select8 parameters.

Scores

EPSS 0.0024
EPSS Percentile 47.0%

Classification

CWE
CWE-79
Status published

Affected Products (1)

directadmin/directadmin

Timeline

Published Jul 03, 2012
Tracked Since Feb 18, 2026