← Vulnerability feed

Vulnerability record · CVE-2007-1926 · published 10 April 2007

CVE-2007-1926: Directadmin cross-site scripting vulnerability

Directadmin · Directadmin

Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated users to inject arbitrary web script or HTML via (1) http or (2) ftp requests logged in /var/log/directadmin/security.log; (3) allows context-dependent attackers to inject arbitrary web script or HTML into /var/log/messages via a PHP script that invokes /usr/bin/logger; (4) allows local users to inject arbitrary web script or HTML into /var/log/messages by invoking /usr/bin/logger at the command line; and allows remote attackers to inject arbitrary web script or HTML via remote requests logged in the (5) /var/log/exim/rejectlog, (6) /var/log/exim/mainlog, (7) /var/log/proftpd/auth.log, (8) /var/log/httpd/error_log, (9) /var/log/httpd/access_log, (10) /var/log/directadmin/error.log, and (11) /var/log/directadmin/security.log files.

6.8 CVSS 2.0 Medium EPSS 1.6% · top 25.9% CWE-79 · Cross-site scripting
6.8CVSS 2.0 base score
1.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated users to inject arbitrary web script or HTML via (1) http or (2) ftp requests logged in /var/log/directadmin/security.log; (3) allows context-dependent attackers to inject arbitrary web script or HTML into /var/log/messages via a PHP script that invokes /usr/bin/logger; (4) allows local users to inject arbitrary web script or HTML into /var/log/messages by invoking /usr/bin/logger at the command line; and allows remote attackers to inject arbitrary web script or HTML via remote requests logged in the (5) /var/log/exim/rejectlog, (6) /var/log/exim/mainlog, (7) /var/log/proftpd/auth.log, (8) /var/log/httpd/error_log, (9) /var/log/httpd/access_log, (10) /var/log/directadmin/error.log, and (11) /var/log/directadmin/security.log files.

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/24728 ExploitPatchVendor Advisory
http://securityreason.com/securityalert/2534 Third Party Advisory
http://www.directadmin.com/features.php?id=760 Release Notes
http://www.directadmin.com/versions.php Patch
http://www.securityfocus.com/archive/1/464471/100/100/threaded Broken Link
http://www.securityfocus.com/bid/23254 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/33390 Third Party Advisory
http://secunia.com/advisories/24728 ExploitPatchVendor Advisory
http://securityreason.com/securityalert/2534 Third Party Advisory
http://www.directadmin.com/features.php?id=760 Release Notes
http://www.directadmin.com/versions.php Patch
http://www.securityfocus.com/archive/1/464471/100/100/threaded Broken Link
http://www.securityfocus.com/bid/23254 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/33390 Third Party Advisory

Track CVE-2007-1926 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-18045Directadmin vulnerabilityJBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows remote attackers to obtain access or cause a denial of se…EPSS 1.4%8.8CVE-2019-9625Directadmin cross-site request forgery vulnerabilityJBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account.EPSS 2.4%8.5CVE-2009-1525Directadmin improper input validation vulnerabilityCMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter …EPSS 2.5%8.2CVE-2025-56551Directadmin vulnerabilityAn issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and replace the legitimate login interface with arbitrary …EPSS 0.36%6.9CVE-2009-1526Directadmin link following vulnerabilityJBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temp…EPSS 0.55%6.1CVE-2019-11193Directadmin cross-site scripting vulnerabilityThe FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD_FILE_MANAGER, CMD_SHOW_USER, and CMD_SHOW_RESELLER; an attacker can bypass …EPSS 2.1%6.1CVE-2009-2216Directadmin cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or …EPSS 1.5%6.0CVE-2006-5983Directadmin cross-site scripting vulnerabilityMultiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users to inject arbitrary web scri…EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2007-1926), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.