CVE-2014-3808

Published: May 21, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive before 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) role parameter to roles.lsp, (2) name parameter to user.lsp, (3) path parameter to wizard/setuser.lsp, (4) host parameter to tunnelconstr.lsp, or (5) newpath parameter to wfsconstr.lsp in rtl/protected/admin/.

Affected (9)

Products: Barracudadrive: Barracudadrive · Realtimelogic: Barracudadrive

1 product

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Barracudadrive Barracudadrive	Up to 6.7.1
Barracudadrive Barracudadrive	Version 6.0
Barracudadrive Barracudadrive	Version 6.1
Barracudadrive Barracudadrive	Version 6.2
Barracudadrive Barracudadrive	Version 6.3
Barracudadrive Barracudadrive	Version 6.4
Barracudadrive Barracudadrive	Version 6.6
Barracudadrive Barracudadrive	Version 6.7
Realtimelogic Barracudadrive	Version 6.5