CVE-2007-6314

BarracudaDrive Web Server <3.8 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-6314.

AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in BarracudaDrive Web Server, including directory traversal, script source visualization, arbitrary file deletion, NULL pointer crash, and HTML injection. It provides specific HTTP requests to exploit these vulnerabilities.

Description

BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1) + (plus), (2) . (dot), or (3) %80 and similar characters to the file name in the URL.

Exploits (1)

exploitdb WORKING POC
remotewindows
https://www.exploit-db.com/exploits/4713

The exploit demonstrates multiple vulnerabilities in BarracudaDrive Web Server, including directory traversal, script source visualization, arbitrary file deletion, NULL pointer crash, and HTML injection. It provides specific HTTP requests to exploit these vulnerabilities.

Classification
Working Poc 100%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: BarracudaDrive Web Server <= 3.7.2
Auth required
Prerequisites: Network access to the target server · Valid user credentials for authenticated exploits
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/484833/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38972
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28032
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3434
Exploit, Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26805

Scores

EPSS 0.0721
EPSS Percentile 93.5%

Details

CWE
CWE-20
Status published
Products (2)
real_time_logic/barracudadrive_web_server 3.7.2
real_time_logic/barracudadrive_web_server_home_server 3.7.2
Published Dec 12, 2007
Tracked Since Feb 18, 2026