DirectAdmin 0-day and repair

Generally, LINUX is a virtual host, which is difficult to escalate power and rebound.

This vulnerability exists in MSF and PHP, so it cannot be detected...
If you have a management platform, DirectAdmin
Then you can succeed.
 
Default logon address: http: // ip: 2222/
 
 
In LINUX,/usr/local/directadmin/custombuild/mysql_backups

This directory is the user's backup directory, but the tragedy is that the WWW user group can access
 
If the user backs up the data, assume that the user is/home/hacked/domains/11.com/
The backup file name is hacked. SQL.