CVE-2007-6316 Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activa...
MediumCVSS 4.3
EPSS 3.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| real time logic barracudadrive web server | = 3.7.2 | No fix listed |
| real time logic barracudadrive web server home server | = 3.7.2 | No fix listed |
References
- aluigi.altervista.org exploit
- 28032 third-party-advisory vendor-advisory
- 3434 third-party-advisory
- 20071210 Multiple vulnerabilities in BarracudaDrive 3.7.2 mailing-list
- 26805 exploit patch vdb-entry