| Package | Affected versions | Patched versions |
|---|---|---|
| directadmin | < 1.33.4 | 1.33.4 |
JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATH_INFO to the CMD_DB script during a backup action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free