Login Request a demo
Unscored severity · published Dec 19, 2008
CVE-2008-1094
SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows remote authenticated administrators to execute…
–
CVSS
2%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a pattern_x parameter in a search_count_equals action, as demonstrated by the pattern_0 parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
Barracuda Spam Firewall · Barracuda Networks
through 3.5.11.020 · source: NVD
Affected product
BS
Barracuda Spam Firewall
Barracuda Networks
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1094
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1094
Exploit
http://dcsl.ul.ie/advisories/02.htm
Vendor Advisory
http://secunia.com/advisories/33164
securityreason.com
http://securityreason.com/securityalert/4793
securitytracker.com
http://securitytracker.com/id?1021455
Vendor Advisory
http://www.barracudanetworks.com/ns/support/tech_alert.php
www.securityfocus.com
http://www.securityfocus.com/archive/1/499293/100/0/threaded
More from Barracuda Spam Firewall
–
CVE-2008-0971
Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) before 3.5.12.007, Message Archiver before 1.2.1.002, Web Filter before…
–
CVE-2008-2333
Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the…
–
CVE-2007-5058
Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web…
–
CVE-2007-1673
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry…
–
CVE-2006-4081
preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute commands via shell metacharacters ("|" pipe symbol) in the file…