CVE-2019-9625

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• DirectAdmin 1.55 - 'CMD_ACCOUNT_ADMIN' Cross-Site Request Forgery2019-03-08 · webapps · php

Impact

JBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/ManhNho/CVEs/blob/master/New-Requests/DirectAdmin-CSRF
• https://www.exploit-db.com/exploits/46520/
• https://github.com/ManhNho/CVEs/blob/master/New-Requests/DirectAdmin-CSRF
• https://www.exploit-db.com/exploits/46520/