CVE:CVE-2007-1926
CNNVD:CNNVD-200704-137
JBMC Software DirectAdmin 存在跨站脚本攻击漏洞。如果它没有正确的显示登录文件的话，远程认证用户可以借助登录到/var/log/directadmin/security.log中的(1)http或(2)ftp请求，注入任意的web脚本或HTML；(3)见机行事的攻击者可以借助调用/usr/bin/logger的PHP脚本，注入任意的web脚本或HTML到/var/log/messages；(4)本地用户可以调用命令行中的/usr/bin/logger，注入任意的web脚本或HTML到/var/log/messages；远程攻击者可以借助登录到(5)/var/log/exim/rejectlog,(6)/var/log/exim/mainlog,(7)/var/log/proftpd/auth.log,(8)/var/log/httpd/error_log, (9)/var/log/httpd/access_log,(10)/var/log/directadmin/error.log和(11)/var/log/directadmin/security.log文件的远程请求，注入任意的web脚本或HTML。
solution:Upgrade jbmc_software directadmin to a higher version than 1.293,and avoid the version (,1.293]