HIGH🇵🇱 Wersja polska

CVE-2019-9625

CVSS 8.8v3.0pub. 2019-03-07upd. 2024-11-21

JBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Directadmin

    APP
    Directadmin
    1.55
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2017-18045CRITICAL9.8ten sam produkt

JBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows remote attackers t...

CVE-2025-56551HIGH8.2ten sam produkt

An issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and replace the leg...

CVE-2009-1525HIGH8.5ten sam produkt

CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shel...

CVE-2019-11193MEDIUM6.1ten sam produkt

The FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD_FILE_MANAGER, CMD_SHOW_USER, and CMD...

CVE-2012-5305MEDIUM4.3ten sam produkt

Cross-site scripting (XSS) vulnerability in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allows remote attack...