Directadmin vulnerabilities

Products

• Directadmin 14

Newest

• directadmin An issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and... CVE-2025-56551 8.2 HighOctober 3, 2025
• directadmin evolution skin Stored XSS in DirectAdmin Evo Skin CVE-2024-10385 8.6 HighDecember 20, 2024
• directadmin The FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD_FILE_MANAGER,... CVE-2019-11193 Public exploit 6.1 MediumApril 30, 2019
• directadmin JBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account. CVE-2019-9625 Public exploit 8.8 HighMarch 7, 2019
• directadmin JBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows... CVE-2017-18045 9.8 CriticalJanuary 21, 2018
• directadmin Cross-site scripting (XSS) vulnerability in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allows... CVE-2012-5305 4.3 MediumOctober 6, 2012
• directadmin Multiple cross-site scripting (XSS) vulnerabilities in CMD_DOMAIN in JBMC Software DirectAdmin 1... CVE-2012-3842 4.3 MediumJuly 3, 2012
• directadmin Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows... CVE-2009-2216 Public exploit 6.1 MediumJune 25, 2009
• directadmin JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a... CVE-2009-1526 Public exploit 6.9 MediumMay 5, 2009
• directadmin CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain... CVE-2009-1525 8.5 HighMay 5, 2009
• directadmin Cross-site scripting (XSS) vulnerability in CMD_BANDWIDTH_BREAKDOWN in DirectAdmin 1.30.2 and... CVE-2007-4830 4.3 MediumSeptember 12, 2007
• directadmin Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin 1.30.1 and earlier... CVE-2007-3501 4.3 MediumJune 30, 2007
• directadmin Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not... CVE-2007-1926 6.8 MediumApril 10, 2007
• directadmin Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin allows remote attackers... CVE-2007-1508 Public exploit 4.3 MediumMarch 20, 2007
• directadmin Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow... CVE-2006-5983 Public exploit 6.0 MediumNovember 20, 2006