CVE-2007-1926 Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated users to inject arbitrary web script or HTML v...
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated users to inject arbitrary web script or HTML via (1) http or (2) ftp requests logged in /var/log/directadmin/security.log; (3) allows context-dependent attackers to inject arbitrary web script or HTML into /var/log/messages via a PHP script that invokes /usr/bin/logger; (4) allows local users to inject arbitrary web script or HTML into /var/log/messages by invoking /usr/bin/logger at the command line; and allows remote attackers to inject arbitrary web script or HTML via remote requests logged in the (5) /var/log/exim/rejectlog, (6) /var/log/exim/mainlog, (7) /var/log/proftpd/auth.log, (8) /var/log/httpd/error_log, (9) /var/log/httpd/access_log, (10) /var/log/directadmin/error.log, and (11) /var/log/directadmin/security.log files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| directadmin | < 1.29.3 | 1.29.3 |
References
- 24728 exploit patch third-party-advisory vendor-advisory
- 2534 third-party-advisory
- www.directadmin.com release-notes
- www.directadmin.com patch
- 20070401 DirectAdmin persistant XSS [takeover an Administrator`s account] broken-link mailing-list
- 23254 broken-link vdb-entry
- directadmin-log-xss(33390) third-party-advisory vdb-entry