CVE-2007-1508: XSS
Published Mar 20, 2007
·Updated
Cross-site scripting (XSS) vulnerability in CMDUSERSTATS in DirectAdmin allows remote attackers to inject arbitrary web script or HTML via the RESULT parameter, a different vector than CVE-2006-5983.
Affected Software
2 affected components
JBMC Software DirectAdmin=1.293
DirectAdmin DirectAdmin
Event History
Mar 20, 2007
CVE Published
10:19 AM
Data Sourced
via NVD·10:19 AM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1508?
CVE-2007-1508 is classified as a medium-severity cross-site scripting vulnerability.
2
How do I fix CVE-2007-1508?
To fix CVE-2007-1508, update DirectAdmin to the latest version that addresses this vulnerability.
3
What software is affected by CVE-2007-1508?
CVE-2007-1508 affects DirectAdmin version 1.293.
4
What type of vulnerability is CVE-2007-1508?
CVE-2007-1508 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2007-1508 be exploited remotely?
Yes, CVE-2007-1508 allows remote attackers to exploit the vulnerability via crafted input.