vion707 DMadmin Backend AddonsController.class.php add cross site scripting

This XSS vulnerability allows an attacker to inject arbitrary JavaScript code into the DMadmin interface. An attacker could leverage this to steal user credentials, redirect users to malicious websites, or deface the application. The impact is amplified if DMadmin is used to manage sensitive data or control critical infrastructure, as an attacker could potentially gain unauthorized access and control. The publicly disclosed nature of the exploit increases the likelihood of exploitation, especially given the vendor's lack of response to the disclosure.

Organizations using vion707 DMadmin for managing their infrastructure or applications are at risk. This includes those relying on DMadmin for configuration management, monitoring, or other critical tasks. Shared hosting environments where multiple users share the same DMadmin instance are particularly vulnerable, as a compromise of one user could potentially affect others.

• php: Examine the Admin/Controller/AddonsController.class.php file for any unusual or unexpected code.

grep -r 'eval(' /path/to/DMadmin/Admin/Controller/

• generic web: Monitor access logs for suspicious requests targeting the Add function with unusual parameters.

grep 'Admin/Controller/AddonsController.class.php' /var/log/apache2/access.log

• generic web: Check response headers for signs of script injection.

curl -I <DMadmin_URL>/Admin/Controller/AddonsController.class.php | grep Content-Type

1. 2025-12-15Disclosure

   Public Disclosure

1. 已保留2025-12-15
2. 发布日期2025-12-15
3. EPSS 更新日期2026-03-23

The primary mitigation is to upgrade to version 3403.0.1 or later, which contains the fix for this vulnerability. If upgrading immediately is not possible, consider implementing temporary workarounds such as input validation and output encoding on the Add function within Admin/Controller/AddonsController.class.php. Web application firewalls (WAFs) configured to detect and block XSS payloads can also provide a layer of protection. After upgrading, confirm the vulnerability is resolved by attempting to inject a simple XSS payload into the Add function and verifying that it is properly sanitized.