CVE-2012-3842

Multiple cross-site scripting (XSS) vulnerabilities in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via the (1) select0 or (2) select8 parameters.

• CWE-79

• http://archives.neohapsis.com/archives/bugtraq/2012-04/0214.htmlBroken Link
• http://www.securityfocus.com/bid/53281Exploit
• http://www.vulnerability-lab.com/get_content.php?id=509Exploit, Third Party Advisory
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0214.htmlBroken Link
• http://www.securityfocus.com/bid/53281Exploit
• http://www.vulnerability-lab.com/get_content.php?id=509Exploit, Third Party Advisory

Published

Jul 3, 2012

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3836Multiple cross-site scripting (XSS) vulnerabilities in Baby …
• CVE-2012-3837Multiple cross-site scripting (XSS) vulnerabilities in apps/…
• CVE-2012-3838Gekko before 1.2.0 allows remote attackers to obtain the ins…
• CVE-2012-3839Multiple SQL injection vulnerabilities in application/core/M…
• CVE-2012-3840Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2012-3841Untrusted search path vulnerability in KMPlayer 3.2.0.19 all…
• CVE-2012-3843Cross-site scripting (XSS) vulnerability in the registration…
• CVE-2012-3844Cross-site scripting (XSS) vulnerability in vBulletin 4.1.12…
• CVE-2012-3845Buffer overflow in LAN Messenger 1.2.28 and earlier allows r…
• CVE-2012-3846Cross-site scripting (XSS) vulnerability in index.php in PHP…
• CVE-2012-3847slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTo…
• CVE-2012-3848Multiple cross-site scripting (XSS) vulnerabilities in the w…