PT-2012-5904
CVE-2012-5305
·
تاريخ النشر
2012-10-06
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
JBMC Software DirectAdmin version 1.403
Description
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the domain parameter in CMD DOMAIN.
Recommendations
For version 1.403, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the CMD DOMAIN function to minimize the risk of exploitation. Avoid using the domain parameter in the affected function until the issue is resolved.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾