CVE-2008-1094

SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a pattern_x parameter in a search_count_equals action, as demonstrated by the pattern_0 parameter.

• CWE-89

• http://dcsl.ul.ie/advisories/02.htmExploit
• http://secunia.com/advisories/33164Vendor Advisory
• http://securityreason.com/securityalert/4793
• http://securitytracker.com/id?1021455
• http://www.barracudanetworks.com/ns/support/tech_alert.phpVendor Advisory
• http://www.securityfocus.com/archive/1/499293/100/0/threaded
• https://www.exploit-db.com/exploits/7496
• http://dcsl.ul.ie/advisories/02.htmExploit
• http://secunia.com/advisories/33164Vendor Advisory
• http://securityreason.com/securityalert/4793
• http://securitytracker.com/id?1021455
• http://www.barracudanetworks.com/ns/support/tech_alert.phpVendor Advisory
• http://www.securityfocus.com/archive/1/499293/100/0/threaded
• https://www.exploit-db.com/exploits/7496

Published

Dec 19, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-1088Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003…
• CVE-2008-1089Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 …
• CVE-2008-1090Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 …
• CVE-2008-1091Unspecified vulnerability in Microsoft Word in Office 2000 a…
• CVE-2008-1092Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsof…
• CVE-2008-1093Acresso InstallShield Update Agent does not properly verify …
• CVE-2008-1095Unspecified vulnerability in the Internet Protocol (IP) impl…
• CVE-2008-1096The load_tile function in the XCF coder in coders/xcf.c in (…
• CVE-2008-1097Heap-based buffer overflow in the ReadPCXImage function in t…
• CVE-2008-1098Multiple cross-site scripting (XSS) vulnerabilities in MoinM…
• CVE-2008-1099_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier …
• CVE-2008-1100Buffer overflow in the cli_scanpe function in libclamav (lib…