CVE

Id
28415  
CVE No.
CVE-2007-5058  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web script or HTML via the username field in a login attempt, which is not properly handled when the Monitor Web Syslog screen is open.  
Phase
Assigned (20070924)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
295287 28415 CVE-2007-5058 BUGTRAQ:20070921 [ISR] - Barracuda Spam Firewall. Cross-Site Scripting  View
295288 28415 CVE-2007-5058 URL:http://www.securityfocus.com/archive/1/archive/1/480238/100/0/threaded  View
295289 28415 CVE-2007-5058 MISC:http://www.infobyte.com.ar/adv/ISR-15.html  View
295290 28415 CVE-2007-5058 CONFIRM:http://www.barracudanetworks.com/ns/support/tech_alert.php  View
295291 28415 CVE-2007-5058 BID:25757  View
295292 28415 CVE-2007-5058 URL:http://www.securityfocus.com/bid/25757  View
295293 28415 CVE-2007-5058 VUPEN:ADV-2007-3257  View
295294 28415 CVE-2007-5058 URL:http://www.vupen.com/english/advisories/2007/3257  View
295295 28415 CVE-2007-5058 OSVDB:38156  View
295296 28415 CVE-2007-5058 URL:http://osvdb.org/38156  View
295297 28415 CVE-2007-5058 SECTRACK:1018733  View
295298 28415 CVE-2007-5058 URL:http://www.securitytracker.com/id?1018733  View
295299 28415 CVE-2007-5058 SECUNIA:26937  View
295300 28415 CVE-2007-5058 URL:http://secunia.com/advisories/26937  View
295301 28415 CVE-2007-5058 SREASON:3164  View
295302 28415 CVE-2007-5058 URL:http://securityreason.com/securityalert/3164  View
295303 28415 CVE-2007-5058 XF:barracuda-webadmin-xss(36716)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57447 JVNDB-2007-006139 XCMS の index.php におけるクロスサイトリクエストフォージェリの脆弱性 XCMS の index.php の admin アクションの cpass 機能は、timestamp 値に関する処理に不備があるため、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2007-5060 28415 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006139.html  View