Login Request a demo
Unscored severity · published Sep 24, 2007
CVE-2007-5058
Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web script or HTML via the username field in a login attempt, which is not properly handled when the Monitor Web Syslog screen is open.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
Barracuda Spam Firewall · Barracuda Networks
through 3.4.10.102 · source: NVD
Affected product
BS
Barracuda Spam Firewall
Barracuda Networks
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5058
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5058
osvdb.org
http://osvdb.org/38156
secunia.com
http://secunia.com/advisories/26937
securityreason.com
http://securityreason.com/securityalert/3164
www.barracudanetworks.com
http://www.barracudanetworks.com/ns/support/tech_alert.php
www.infobyte.com.ar
http://www.infobyte.com.ar/adv/ISR-15.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/480238/100/0/threaded
More from Barracuda Spam Firewall
–
CVE-2008-1094
SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows remote authenticated administrators to execute…
–
CVE-2008-0971
Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) before 3.5.12.007, Message Archiver before 1.2.1.002, Web Filter before…
–
CVE-2008-2333
Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the…
–
CVE-2007-1673
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry…
–
CVE-2006-4081
preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute commands via shell metacharacters ("|" pipe symbol) in the file…