CVE-2012-5316 Information

Description

Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via (1) Troubleshooting in the Trace route Device module or (2) LDAP Username in the LDAP Configuration module.

Reference

http://archives.neohapsis.com/archives/bugtraq/2012-01/0130.html http://www.securityfocus.com/bid/51599 http://www.vulnerability-lab.com/get_content.php?id=28 https://exchange.xforce.ibmcloud.com/vulnerabilities/72579