Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown

CVE-2024-10385

Disclosure Date: December 20, 2024 (last updated December 21, 2024)
Ticket management system in DirectAdmin Evolution Skin is vulnerable to XSS (Cross-site Scripting), which allows a low-privileged user to inject and store malicious JavaScript code. If an admin views the ticket, the script might perform actions with their privileges, including command execution.  This issue has been fixed in version 1.668 of DirectAdmin Evolution Skin.
0
0
Attacker Value
Unknown

CVE-2019-9625

Disclosure Date: March 07, 2019 (last updated November 27, 2024)
JBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account.
0
0
Attacker Value
Unknown

CVE-2017-18045

Disclosure Date: January 21, 2018 (last updated November 26, 2024)
JBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows remote attackers to obtain access or cause a denial of service (segfault) via an unspecified request.
0
0
Attacker Value
Unknown

CVE-2012-5305

Disclosure Date: October 06, 2012 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allows remote attackers to inject arbitrary web script or HTML via the domain parameter.
0
0
Attacker Value
Unknown

CVE-2007-4830

Disclosure Date: September 12, 2007 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in CMD_BANDWIDTH_BREAKDOWN in DirectAdmin 1.30.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter.
0
0
Attacker Value
Unknown

CVE-2007-3501

Disclosure Date: June 30, 2007 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin 1.30.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the domain parameter, a different vector than CVE-2007-1508.
0
0