← Database

CVE-2009-1525

HIGH CVSS: 8.5 Published: 2009-05-05 Modified: 2026-06-16

Description

CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a restore action.

Affected Platforms

Directadmin Directadmin

Weakness Type

CWE-20

References