BarracudaDrive 6.5 Local Privilege Escalation Vulnerability

Exploit Title: BarracudaDrive v6.5 - User-System - Local Privilege Escalation Exploit Author: Bobby Cooke boku & Adeeb Shah @hyd3sec Date: 08-08-2020 Vendor Homepage: https://barracudaserver.com/ Software Link: https://download.cnet.com/BarracudaDrive/3001-185064-10723210.html Version: v6.5 Teste...

BarracudaDrive 6.5 Local Privilege Escalation

Exploit Title: BarracudaDrive v6.5 - User-System - Local Privilege Escalation Exploit Author: Bobby Cooke boku & Adeeb Shah @hyd3sec Date: 08-08-2020 Vendor Homepage: https://barracudaserver.com/ Software Link: https://download.cnet.com/BarracudaDrive/3001-185064-10723210.html Version: v6.5 Teste...

CVE-2014-4335

Multiple cross-site scripting XSS vulnerabilities in BarracudaDrive 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 host or 2 password parameter to rtl/protected/admin/ddns/...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BarracudaDrive 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 host or 2 password parameter to rtl/protected/admin/ddns/...

CVE-2014-4335

Multiple cross-site scripting XSS vulnerabilities in BarracudaDrive 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 host or 2 password parameter to rtl/protected/admin/ddns/...

CVE-2014-4335

CVE-2014-4335 affects BarracudaDrive 6.7.2, where multiple XSS vulnerabilities allow remote attackers to inject arbitrary script or HTML via the rtl/protected/admin/ddns/ parameters (host or password). Root cause: insufficient input sanitization in the affected web interface. Impact: attacker can...

BarracudaDrive 6.7.2 Cross Site Scripting

Exploit Title : BarracudaDrive 6.7.2 Administrator Panel Rflected Cross-Site Scripting Author : Govind Singh aka NullCool Vendor : http://barracudadrive.com Software : BarracudaDrive 6.7.2 Date : 15/06/2014 Discovered At : IHT Lab 1ND14N H4X0R5 T34M Love to : error1046, DeadMan India,...

BarracudaDrive Version Detection

Detection of BarracudaDrive. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

BarracudaDrive Multiple XSS Vulnerabilities -01 (Jun 2014)

BarracudaDrive is prone to multiple XSS vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

BarracudaDrive Multiple XSS Vulnerabilities -02 (Jun 2014)

BarracudaDrive is prone to multiple XSS vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

BarracudaDrive Multiple XSS Vulnerabilities -03 (Jun 2014)

BarracudaDrive is prone to multiple XSS vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-3808

Multiple cross-site scripting XSS vulnerabilities in BarracudaDrive before 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 role parameter to roles.lsp, 2 name parameter to user.lsp, 3 path parameter to wizard/setuser.lsp, 4 host parameter to tunnelconstr.lsp, or 5...

CVE-2014-3807

Multiple cross-site scripting XSS vulnerabilities in BarracudaDrive 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 blog, 2 bloggeruser, or 3 bloggerpasswd parameter to private/manage/...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BarracudaDrive 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 blog, 2 bloggeruser, or 3 bloggerpasswd parameter to private/manage/...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BarracudaDrive before 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 role parameter to roles.lsp, 2 name parameter to user.lsp, 3 path parameter to wizard/setuser.lsp, 4 host parameter to tunnelconstr.lsp, or 5...

CVE-2014-3807

CVE-2014-3807 concerns BarracudaDrive 6.7.2, where multiple cross-site scripting (XSS) vulnerabilities exist in the web interface. The underlying issue allows remote attackers to inject arbitrary web script or HTML through the private/manage/ page by supplying one of three parameters: blog, blogg...

CVE-2014-3807

Multiple cross-site scripting XSS vulnerabilities in BarracudaDrive 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 blog, 2 bloggeruser, or 3 bloggerpasswd parameter to private/manage/...

CVE-2014-3808

Multiple cross-site scripting XSS vulnerabilities in BarracudaDrive before 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 role parameter to roles.lsp, 2 name parameter to user.lsp, 3 path parameter to wizard/setuser.lsp, 4 host parameter to tunnelconstr.lsp, or 5...

CVE-2014-3808

CVE-2014-3808 affects BarracudaDrive prior to 6.7.2. It comprises multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via (1) role parameter to roles.lsp, (2) name parameter to user.lsp, (3) path parameter to wizard/setuser.lsp, (4) host parameter to tu...

BarracudaDrive 6.7.2 Cross Site Scripting Vulnerability

BarracudaDrive version 6.7.2 suffers from multiple reflective and persistent cross site scripting vulnerabilities. Exploit Title : BarracudaDrive Content Management System Multiple XSS Vulnerabilities Author : Manish Kishan Tanwar Vendor : http://barracudadrive.com Software : BarracudaDrive 6.7.2...