Security Advisory
CVE-2019-11193
6.1
MEDIUM
Vulnerability Description
The FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD_FILE_MANAGER, CMD_SHOW_USER, and CMD_SHOW_RESELLER; an attacker can bypass the CSRF protection with this, and take over the administration panel.
Published Date
April 30, 2019
Official Source
NIST NVD Advisory