Browse CVEs

HIGH 8.2 CVE-2025-56551 An issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and replace the legitimate login interface with arbitrary … Directadmin No fix yet Fix from $1,9502025-10-03 MEDIUM 6.1 CVE-2019-11193 The FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD_FILE_MANAGER, CMD_SHOW_USER, and CMD_SHOW_RESELLER; an attacker can bypass … Directadmin after 1.561 Fix from $1,6002019-04-30 HIGH 8.8 CVE-2019-9625 JBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account. Directadmin No fix yet Fix from $1,9502019-03-07 CRITICAL 9.8 CVE-2017-18045 JBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows remote attackers to obtain access or cause a denial of se… Directadmin 1.52+ Fix from $2,3002018-01-21 MEDIUM 6.1 CVE-2009-2216 Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or … Directadmin after 1.33.6 Fix from $1,6002009-06-25 HIGH 8.5 CVE-2009-1525 CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter … Directadmin 1.33.4+ Fix from $1,9502009-05-05 MEDIUM 6.9 CVE-2009-1526 JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temp… Directadmin 1.33.4+ Fix from $1,6002009-05-05 MEDIUM 6.8 CVE-2007-1926 Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authentic… Directadmin 1.29.3+ Fix from $1,6002007-04-10 MEDIUM 6.0 CVE-2006-5983 Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users to inject arbitrary web scri… Directadmin No fix yet Fix from $1,6002006-11-20