CVE-2009-1526

2022-10-0316:23:57

mitre

www.cve.org

directadmin

symlink attack

temporary directory

cmd_db script

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.9%

JSON

JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATH_INFO to the CMD_DB script during a backup action.