CVE-2009-2216

Опубликовано: 25 июн. 2009

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the URI in a view=advanced request.

Ссылки

http://pridels-team.blogspot.com/2009/06/directadmin-v1336-xss-vuln.html
Exploit
http://secunia.com/advisories/35525
Third Party Advisory
http://www.securityfocus.com/bid/35450
Exploit
Broken Link
http://www.vupen.com/english/advisories/2009/1663
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51292
Third Party Advisory
http://pridels-team.blogspot.com/2009/06/directadmin-v1336-xss-vuln.html
Exploit
http://secunia.com/advisories/35525
Third Party Advisory
http://www.securityfocus.com/bid/35450
Exploit
Broken Link
http://www.vupen.com/english/advisories/2009/1663
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51292
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:directadmin:directadmin:*:*:*:*:*:*:*:*

Версия до 1.33.6 (включая)

EPSS

Процентиль: 86%

0.02777

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-gm83-wf9j-jhqj