EUVD-2017-9185

Malware in sbrugna...

EUVD-2019-18996

Malware in sbrugna...

CVE-2019-9625

JBMC DirectAdmin 1.55 allows CSRF via the /CMDACCOUNTADMIN URI to create a new admin account...

CVE-2019-9625

JBMC DirectAdmin 1.55 allows CSRF via the /CMDACCOUNTADMIN URI to create a new admin account...

CVE-2019-9625

DirectAdmin 1.55 is vulnerable to a Cross-Site Request Forgery (CSRF) via the CMD_ACCOUNT_ADMIN URI, enabling an attacker to create a new admin account. The flaw is triggered in scenarios where an authenticated admin visits a crafted page or form that issues a POST to /CMD_ACCOUNT_ADMIN, as descr...

PT-2019-19761

Name of the Vulnerable Software and Affected Versions JBMC DirectAdmin version 1.55 Description The issue allows for CSRF via the "/CMD ACCOUNT ADMIN" API endpoint to create a new admin account. Recommendations For version 1.55, consider disabling access to the "/CMD ACCOUNT ADMIN" API endpoint...

CVE-2019-9625: Cross-Site Request Forgery (CSRF)

JBMC DirectAdmin 1.55 allows CSRF via the /CMDACCOUNTADMIN URI to create a new admin account...

Unspecified Vulnerability in JBMC DirectAdmin

JBMC DirectAdmin is a server visual management panel from JBMC Software Canada. A security vulnerability exists in JBMC DirectAdmin versions prior to 1.52. A remote attacker can exploit this vulnerability by sending a request to gain access or cause a denial of service segmentation error...

Design/Logic Flaw

JBMC DirectAdmin before 1.52, when the emailftppasswordchange setting is nonzero, allows remote attackers to obtain access or cause a denial of service segfault via an unspecified request...

CVE-2017-18045

JBMC DirectAdmin before 1.52, when the emailftppasswordchange setting is nonzero, allows remote attackers to obtain access or cause a denial of service segfault via an unspecified request...

CVE-2017-18045

CVE-2017-18045 affects JBMC DirectAdmin prior to 1.52. When the email_ftp_password_change setting is nonzero, remote attackers can obtain access or cause a denial of service (segmentation fault) via an unspecified request. Connected sources corroborate the description across Red Hat and CNVD entr...

PT-2018-6635

Name of the Vulnerable Software and Affected Versions: JBMC DirectAdmin versions prior to 1.52 Description: The issue allows remote attackers to obtain access or cause a denial of service via an unspecified request when the email ftp password change setting is nonzero. Recommendations: For versio...

CVE-2017-18045: Undefined Security Weakness

JBMC DirectAdmin before 1.52, when the emailftppasswordchange setting is nonzero, allows remote attackers to obtain access or cause a denial of service segfault via an unspecified request...