CVEvulnerability
CVE-2007-6316
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page.
Affected configurations
• real time logic barracudadrive web server 3.7.2
• real time logic barracudadrive web server home server 3.7.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://aluigi.altervista.org/adv/barradrive-adv.txt Exploit
- http://secunia.com/advisories/28032 Vendor Advisory
- http://securityreason.com/securityalert/3434 securityreason.com
- http://www.securityfocus.com/archive/1/484833/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26805 Exploit, Patch
- http://aluigi.altervista.org/adv/barradrive-adv.txt Exploit
- http://secunia.com/advisories/28032 Vendor Advisory
- http://securityreason.com/securityalert/3434 securityreason.com
- http://www.securityfocus.com/archive/1/484833/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26805 Exploit, Patch