Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-1094. PoCs published by Marian Ventuneac.
AI-analyzed exploit summary This advisory describes a SQL injection vulnerability in Barracuda Networks Spam Firewall, specifically in the index.cgi resource. The vulnerability allows authenticated users to inject arbitrary SQL code via the pattern_x parameter when filtering user accounts.
Description
SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a pattern_x parameter in a search_count_equals action, as demonstrated by the pattern_0 parameter.
Exploits (1)
This advisory describes a SQL injection vulnerability in Barracuda Networks Spam Firewall, specifically in the index.cgi resource. The vulnerability allows authenticated users to inject arbitrary SQL code via the pattern_x parameter when filtering user accounts.