Directadmin
Approved changes feed: RSS · Atom
cpe:2.3:a:directadmin:directadmin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Directadmin (ece6e464-70d0-5966-b6d6-bc5ac92fe2ab) |
|---|---|
| Product | Directadmin (2328dffc-26c2-5629-896f-5b1118103f9f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-11193 |
vulnerable | 2026-06-08 05:12:36.580533 |
Details available
The FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD_FILE_MANAGER, CMD_SHOW_USER, and CMD_SHOW_RESELLER; an attacker can bypass the CSRF protection with this, and take over the administration panel.
Published: 2019-04-30T18:36:27.000Z
Updated: 2024-08-04T22:48:08.994Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18045 |
vulnerable | 2026-06-08 05:09:10.254560 |
Details available
JBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows remote attackers to obtain access or cause a denial of service (segfault) via an unspecified request.
Published: 2018-01-21T07:00:00.000Z
Updated: 2024-09-16T20:21:16.814Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2216 |
vulnerable | 2026-06-08 04:51:27.305826 |
Details available
Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the URI in a view=advanced request.
Published: 2009-06-25T21:00:00.000Z
Updated: 2024-08-07T05:44:55.409Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1526 |
vulnerable | 2026-06-08 04:51:23.835698 |
Details available
JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATH_INFO to the CMD_DB script during a backup action.
Published: 2009-05-05T20:00:00.000Z
Updated: 2024-09-16T20:17:02.921Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1525 |
vulnerable | 2026-06-08 04:51:23.832668 |
Details available
CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a restore action.
Published: 2009-05-05T20:00:00.000Z
Updated: 2024-08-07T05:13:25.646Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4830 |
vulnerable | 2026-06-08 04:49:57.307979 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3501 |
vulnerable | 2026-06-08 04:49:54.111840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1926 |
vulnerable | 2026-06-08 04:49:43.841102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.