Directadmin ControlPanel DoS and XSS Vulns Exposed By Amir Of The IEDB Team

Iranian security researcher and IEDB Team member/IEDB/IrIsT.ir and Xssed.ir founder Amir has published a DoS vulnerability in the Directadmin ControlPanel software -http://www.directadmin.com- Directadmin is a web hosting control panel for the remote web-based administration of multiple web servers.

The vulnerability affects Directadmin ControlPanel version 1.50.1 and older. In this vulnerability, an attacker can input an unlimited length password in the password field of the DirectAdmin login screen -there is no limit on the number of characters entered- which causes DirectAdmin to crash. This problem is present in all versions of DirectAdmin.

An attacker could write a script to attack DDoS based on the following information :

http://IP:2222/CMD_LOGIN
POST /CMD_LOGIN HTTP/1.1
referer=%2F&username=$POC&password=$POC
$POC = A * 10000

Links to details :

• http://www.iedb.ir/exploits-6517.html
• https://cxsecurity.com/issue/WLB-2017010038

Amir has also published recently a cross-site scripting vulnerability for Directadmin ControlPanel which enables an attacker to suspend or unsuspend users.

Links to details:

• http://iedb.ir/exploits-6523.html
• http://iedb.ir/img/bug-directadmin-iedb.ir.jpg