PT-2025-40538 · Unknown · Directadmin

Scott Sturrock + 1 · Publicado 2025-10-03 · Atualizado 2025-10-03 · CVE-2025-56551

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions DirectAdmin version 1.680

Description An issue allows unauthorized attackers to manipulate the page layout and replace the legitimate login interface with arbitrary attacker-controlled content. This is achieved by submitting a crafted GET request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-598

Identificadores relacionados

CVE-2025-56551

Produtos afetados

Directadmin

Referências · 6

• 🔥 https://cxsecurity.com/issue/WLB-2025100001 · Exploit
• https://twitter.com/CVEnew/status/1974164965348303278 · Publicação no Twitter
• https://i.imgur.com/qA6SAXO.png · Nota
• https://osv.dev/vulnerability/CVE-2025-56551 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-56551 · Nota de Segurança
• https://i.imgur.com/4HF0cnP.png · Nota