CoreCVE

CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 0Last 7 days 2,759Total CVEs 401,121CISA KEV 1,731Critical 42,393 All stats
Clear
More filters (active)
Filters: Vendor: Directadmin Remove filter Clear all

Page 1

CVE-2025-56551 HIGH

An issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and replace the legitimate login interface with arbitrary attacker-c…

CVSS 8.2 EPSS 0.36% Oct 3, 2025
CVE-2024-10385 HIGH

Stored XSS in DirectAdmin Evo Skin

CVSS 8.6 EPSS 0.66% Dec 20, 2024
CVE-2019-11193 MEDIUM

The FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD_FILE_MANAGER, CMD_SHOW_USER, and CMD_SHOW_RESELLER; an attacker can bypass the CSRF p…

CVSS 6.1 EPSS 2.09% Apr 30, 2019
CVE-2019-9625 HIGH

JBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account.

CVSS 8.8 EPSS 2.44% Mar 7, 2019
CVE-2017-18045 CRITICAL

JBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows remote attackers to obtain access or cause a denial of service (seg…

CVSS 9.8 EPSS 1.39% Jan 21, 2018
CVE-2012-5305 MEDIUM

Cross-site scripting (XSS) vulnerability in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allows remote attackers to inject arbitrary web script or HTML via th…

CVSS 4.3 EPSS 1.16% Oct 6, 2012
CVE-2012-3842 MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allow remote authenticated users with certain privileges t…

CVSS 4.3 EPSS 1.18% Jul 3, 2012
CVE-2009-2216 MEDIUM

Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or HTML via t…

CVSS 6.1 EPSS 1.52% Jun 25, 2009
CVE-2009-1526 MEDIUM

JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary dire…

CVSS 6.9 EPSS 0.55% May 5, 2009
CVE-2009-1525 HIGH

CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a r…

CVSS 8.5 EPSS 2.46% May 5, 2009
CVE-2007-4830 MEDIUM

Cross-site scripting (XSS) vulnerability in CMD_BANDWIDTH_BREAKDOWN in DirectAdmin 1.30.2 and earlier allows remote attackers to inject arbitrary web script or…

CVSS 4.3 EPSS 1.06% Sep 12, 2007
CVE-2007-3501 MEDIUM

Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin 1.30.1 and earlier allows remote attackers to inject arbitrary web script or HTML via…

CVSS 4.3 EPSS 1.22% Jun 30, 2007
CVE-2007-1926 MEDIUM

Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated users…

CVSS 6.8 EPSS 1.55% Apr 10, 2007
CVE-2007-1508 MEDIUM

Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin allows remote attackers to inject arbitrary web script or HTML via the RESULT paramet…

CVSS 4.3 EPSS 1.77% Mar 20, 2007
CVE-2006-5983 MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users to inject arbitrary web script or HTML…

CVSS 6.0 EPSS 1.77% Nov 20, 2006

Showing 1 to 15 CVEs · page 1