CVE-2009-1526: JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary…

PriorityP425medium6.9CVSS 2.0

AVLACMAuNCCICAC

EXPLOIT

EPSS

0.55%

41.9th percentile

JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATH_INFO to the CMD_DB script during a backup action.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
directadmin	directadmin	< 1.33.4	1.33.4

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.