GCVE - cpe:2.3:a:jbmc-software:directadmin:1.301:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jbmc-software:directadmin:1.301:*:*:*:*:*:*:*

part: a version: 1.301 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-1526`	vulnerable	2026-06-08 04:51:23.835465	Details available JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATH_INFO to the CMD_DB script during a backup action. Published: 2009-05-05T20:00:00.000Z Updated: 2024-09-16T20:17:02.921Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html http://osvdb.org/54014 http://secunia.com/advisories/34861 http://www.directadmin.com/features.php?id=968	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1525`	vulnerable	2026-06-08 04:51:23.824031	Details available CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a restore action. Published: 2009-05-05T20:00:00.000Z Updated: 2024-08-07T05:13:25.646Z Open on db.gcve.eu Reference links http://osvdb.org/54015 http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html https://exchange.xforce.ibmcloud.com/vulnerabilities/50167 http://secunia.com/advisories/34861 http://www.directadmin.com/features.php?id=968	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.