CVE-2007-1926

CVE-2007-1926 affects JBMC Software DirectAdmin before 1.293. The vulnerability arises because DirectAdmin does not properly display log files, enabling cross-site scripting (XSS) via user-controlled input logged in multiple files (e.g., /var/log/directadmin/security.log, /var/log/messages, /var/...

CVE-2006-5983

Multiple cross-site scripting XSS vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 user parameter to a CMDSHOWRESELLER or b CMDSHOWUSER in the Admin level; the 2 TYPE parameter to c CMDTICKETCREATE or d CMDTICKET...

CVE-2006-5983

Multiple cross-site scripting XSS vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 user parameter to a CMDSHOWRESELLER or b CMDSHOWUSER in the Admin level; the 2 TYPE parameter to c CMDTICKETCREATE or d CMDTICKET...