Lucene search
PRIOn knowledge basePRION:CVE-2019-11193HistoryApr 30, 2019 - 7:29 p.m.
Cross site request forgery (csrf)
2019-04-3019:29:00
PRIOn knowledge base
www.prio-n.com
5
The FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD_FILE_MANAGER, CMD_SHOW_USER, and CMD_SHOW_RESELLER; an attacker can bypass the CSRF protection with this, and take over the administration panel.
| CPE | Name | Operator | Version |
|---|---|---|---|
| directadmin | le | 1.561 |
Related
cve
cve
CVE-2019-11193
2019-04-30 19:29:03
cvelist
cvelist
CVE-2019-11193
2019-04-30 18:36:27
packetstorm
packetstorm
DirectAdmin 1.561 Cross Site Scripting
2019-04-12 00:00:00
exploitpack
exploitpack
DirectAdmin 1.561 - Multiple Vulnerabilities
2019-04-15 00:00:00
nvd
nvd
CVE-2019-11193
2019-04-30 19:29:03
exploitdb
exploitdb
DirectAdmin 1.561 - Multiple Vulnerabilities
2019-04-15 00:00:00