Sploitus

10 exploited vulnerabilities in Directadmin

Vulnerabilities with publicly known exploits

Vendors
Jbmc, Unknown, Directadmin, Infinitumit
With known exploits
10
Affected Directadmin versions
All versions

Vulnerabilities with exploits

Highest CVSS first β€” 7 of these already have exploit code on Sploitus

CVE-2019-9625 4 exploits
CVSS 8.8 HIGH 2019-03-07FIX AVAILABLE
DirectAdmin 1.55 - CMD_ACCOUNT_ADMIN Cross-Site Request Forgery VulnerabilityDirectAdmin 1.55 - CMD_ACCOUNT_ADMIN Cross-Site Request Forgery
CVE-2009-1525
CVSS 8.5 HIGH 2009-05-05FIX AVAILABLE
CVE-2025-56551
CVSS 8.2 HIGH 2025-10-03
CVE-2009-1526 1 exploit
CVSS 6.9 MEDIUM 2009-05-05FIX AVAILABLE
DirectAdmin 1.33.3 - '/CMD_DB' Backup Action Insecure Temporary File Creation
CVE-2007-1926
CVSS 6.8 MEDIUM 2007-04-10FIX AVAILABLE
CVE-2019-11193 4 exploits
CVSS 6.1 MEDIUM 2019-04-30FIX AVAILABLE
DirectAdmin 1.561 - Multiple VulnerabilitiesDirectAdmin 1.561 - Multiple Vulnerabilities
CVE-2009-2216 1 exploit
CVSS 6.1 MEDIUM 2009-06-25FIX AVAILABLE
DirectAdmin 1.33.6 - 'CMD_REDIRECT' Cross-Site Scripting
CVE-2006-5983 8 exploits
CVSS 6.0 MEDIUM 2006-11-20FIX AVAILABLE
DirectAdmin 1.28/1.29 - 'CMD_SHOW_RESELLER' Cross-Site ScriptingDirectAdmin 1.28/1.29 - 'CMD_SHOW_USER' Cross-Site Scripting
CVE-2012-3842 1 exploit
CVSS 4.3 MEDIUM 2012-07-03FIX AVAILABLE
DirectAdmin 1.403 θ·¨η«™θ„šζœ¬ζΌζ΄ž
CVE-2007-1508 1 exploit
CVSS 4.3 MEDIUM 2007-03-20
DirectAdmin 1.292 - 'CMD_USER_STATS' Cross-Site Scripting