EIP-2026-101549

This writeup describes an input validation vulnerability in Barracuda IM Firewall 620, allowing server-side script injection. The vulnerability can be exploited via the SMTP Mail Troubleshooting module to execute malicious scripts or manipulate sessions.