CVE-2007-6316

Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page.

Link	Resource
http://aluigi.altervista.org/adv/barradrive-adv.txt	Exploit
http://www.securityfocus.com/bid/26805	Exploit Patch
http://secunia.com/advisories/28032	Vendor Advisory
http://securityreason.com/securityalert/3434
http://www.securityfocus.com/archive/1/484833/100/0/threaded

Configuration 1

cpe:2.3:a:real_time_logic:barracudadrive_web_server:3.7.2:*:*:*:*:*:*:* cpe:2.3:a:real_time_logic:barracudadrive_web_server_home_server:3.7.2:*:*:*:*:*:*:*

---

Published : 2007-12-12 12:46

Updated : 2018-10-15 09:52

---

NVD link : CVE-2007-6316

Mitre link : CVE-2007-6316

No products.

CWE-79