Cross site scripting

2007-12-1200:46:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.7%

JSON

Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page.

CPENameOperatorVersion
barracudadrive_web_servereq3.7.2
barracudadrive_web_server_home_servereq3.7.2

CPE	Name	Operator	Version
	barracudadrive_web_server	eq	3.7.2
	barracudadrive_web_server_home_server	eq	3.7.2

References

aluigi.altervista.org/adv/barradrive-adv.txt

secunia.com/advisories/28032

securityreason.com/securityalert/3434

www.securityfocus.com/archive/1/484833/100/0/threaded

www.securityfocus.com/bid/26805