XSS in Real Time Logic Barracudadrive Web Server
CVE-2007-6316
Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.036 (88.3th percentile) — read the EPSS interpretation.
Affected products
- Real_time_logic Barracudadrive_web_server — versions 3.7.2
- Real_time_logic Barracudadrive_web_server_home_server — versions 3.7.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)