CVE-2009-2216: XSS
Published Jun 25, 2009
·Updated
Cross-site scripting (XSS) vulnerability in CMDREDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the URI in a view=advanced request.
Affected Software
7 affected components
Jbmc-software Directadmin<=1.33.6
Jbmc-software Directadmin=1.33.1
Jbmc-software Directadmin=1.33.2
Jbmc-software Directadmin=1.33.3
Jbmc-software Directadmin=1.33.4
Jbmc-software Directadmin=1.292
DirectAdmin DirectAdmin<=1.33.6
Event History
Jun 25, 2009
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·11:14 PM
DescriptionSeverityWeaknessAffected Software
Oct 15, 57929
Event
via NVD·10:47 AM
Frequently Asked Questions
1
What is the severity of CVE-2009-2216?
CVE-2009-2216 is classified as a moderate severity vulnerability due to the potential for unauthorized script execution.
2
How do I fix CVE-2009-2216?
To fix CVE-2009-2216, upgrade your DirectAdmin version to 1.34.0 or later.
3
What types of attacks can CVE-2009-2216 facilitate?
CVE-2009-2216 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts.
4
Is CVE-2009-2216 present in all versions of DirectAdmin?
No, CVE-2009-2216 affects DirectAdmin versions 1.33.6 and earlier.
5
Who is vulnerable to CVE-2009-2216?
Any organization using DirectAdmin versions 1.33.6 or earlier is vulnerable to CVE-2009-2216.