Directadmin - vulnerabilities (CVEs)

15 CVEs in 3 products, 0 in the last 30 days, newest from 2025-10-03.

Products

Newest CVEs of Directadmin

CVE-2025-56551 - CVSS 8.2 (high), 2025-10-03: An issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and replace the legitimate login interface with arbitrary…
CVE-2024-10385 - CVSS 8.6 (high), 2024-12-20: Ticket management system in DirectAdmin Evolution Skin is vulnerable to XSS (Cross-site Scripting), which allows a low-privileged user to inject and store…
CVE-2019-11193 - CVSS 6.1 (medium), 2019-04-30: The FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD_FILE_MANAGER, CMD_SHOW_USER, and CMD_SHOW_RESELLER; an attacker can bypass the CSRF…
CVE-2019-9625 - CVSS 8.8 (high), 2019-03-07: JBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account.
CVE-2017-18045 - CVSS 9.8 (critical), 2018-01-21: JBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows remote attackers to obtain access or cause a denial of service…
CVE-2012-5305 - CVSS 4.3 (medium), 2012-10-06: Cross-site scripting (XSS) vulnerability in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2012-3842 - CVSS 4.3 (medium), 2012-07-03: Multiple cross-site scripting (XSS) vulnerabilities in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allow remote authenticated users with certain privileges…
CVE-2009-2216 - CVSS 6.1 (medium), 2009-06-25: Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or HTML via…
CVE-2009-1526 - CVSS 6.9 (medium), 2009-05-05: JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary…
CVE-2009-1525 - CVSS 8.5 (high), 2009-05-05: CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a…
CVE-2007-4830 - CVSS 4.3 (medium), 2007-09-12: Cross-site scripting (XSS) vulnerability in CMD_BANDWIDTH_BREAKDOWN in DirectAdmin 1.30.2 and earlier allows remote attackers to inject arbitrary web script…
CVE-2007-3501 - CVSS 4.3 (medium), 2007-06-30: Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin 1.30.1 and earlier allows remote attackers to inject arbitrary web script or HTML…
CVE-2007-1926 - CVSS 6.8 (medium), 2007-04-10: Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated…
CVE-2007-1508 - CVSS 4.3 (medium), 2007-03-20: Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin allows remote attackers to inject arbitrary web script or HTML via the RESULT…
CVE-2006-5983 - CVSS 6 (medium), 2006-11-20: Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users to inject arbitrary web script or…