CVE-2007-4830: Directadmin

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in CMD_BANDWIDTH_BREAKDOWN in DirectAdmin 1.30.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter.

Affected products

• Directadmin Directadmin: up to and including 1.30.2

Published 2007-09-12. Last modified 2026-06-16.