CVE-2007-1926: XSS
Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated users to inject arbitrary web script or HTML via (1) http or (2) ftp requests logged in /var/log/directadmin/security.log; (3) allows context-dependent attackers to inject arbitrary web script or HTML into /var/log/messages via a PHP script that invokes /usr/bin/logger; (4) allows local users to inject arbitrary web script or HTML into /var/log/messages by invoking /usr/bin/logger at the command line; and allows remote attackers to inject arbitrary web script or HTML via remote requests logged in the (5) /var/log/exim/rejectlog, (6) /var/log/exim/mainlog, (7) /var/log/proftpd/auth.log, (8) /var/log/httpd/errorlog, (9) /var/log/httpd/accesslog, (10) /var/log/directadmin/error.log, and (11) /var/log/directadmin/security.log files.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1926?
CVE-2007-1926 is considered a medium severity vulnerability due to its potential for XSS attacks.
How do I fix CVE-2007-1926?
To fix CVE-2007-1926, upgrade DirectAdmin to version 1.293 or later to ensure proper log handling.
What type of attack is associated with CVE-2007-1926?
CVE-2007-1926 is associated with cross-site scripting (XSS) attacks allowing unauthorized script execution.
Who is affected by CVE-2007-1926?
CVE-2007-1926 affects users of JBMC Software DirectAdmin versions prior to 1.293.
What could an attacker do with CVE-2007-1926?
An attacker could exploit CVE-2007-1926 to inject arbitrary web scripts or HTML, potentially compromising user sessions.