An issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and replace the legitimate login interface with arbitrary attacker-controlled content via supplying a crafted GET request.
References
| Link | Resource |
|---|---|
| https://cxsecurity.com/issue/WLB-2025100001 | Exploit Third Party Advisory |
| https://i.imgur.com/4HF0cnP.png | Product |
| https://i.imgur.com/qA6SAXO.png | Product |
Configurations
History
15 Oct 2025, 18:34
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cxsecurity.com/issue/WLB-2025100001 - Exploit, Third Party Advisory | |
| References | () https://i.imgur.com/4HF0cnP.png - Product | |
| References | () https://i.imgur.com/qA6SAXO.png - Product | |
| First Time |
Directadmin directadmin
Directadmin |
|
| CPE | cpe:2.3:a:directadmin:directadmin:1.680:*:*:*:*:*:*:* |
03 Oct 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.2 |
| CWE | CWE-598 |
03 Oct 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-03 17:15
Updated : 2025-10-15 18:34
NVD link : CVE-2025-56551
Mitre link : CVE-2025-56551
CVE.ORG link : CVE-2025-56551
JSON object : View
Products Affected
directadmin
- directadmin
CWE
CWE-598
Use of GET Request Method With Sensitive Query Strings