CVE

Id
31211  
CVE No.
CVE-2008-1094  
Status
Candidate  
Description
SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a pattern_x parameter in a search_count_equals action, as demonstrated by the pattern_0 parameter.  
Phase
Assigned (20080228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
332852 31211 CVE-2008-1094 BUGTRAQ:20081216 CVE-2008-1094 - Barracuda Span Firewall SQL Injection Vulnerability  View
332853 31211 CVE-2008-1094 URL:http://www.securityfocus.com/archive/1/archive/1/499293/100/0/threaded  View
332854 31211 CVE-2008-1094 MILW0RM:7496  View
332855 31211 CVE-2008-1094 URL:http://www.milw0rm.com/exploits/7496  View
332856 31211 CVE-2008-1094 MISC:http://dcsl.ul.ie/advisories/02.htm  View
332857 31211 CVE-2008-1094 CONFIRM:http://www.barracudanetworks.com/ns/support/tech_alert.php  View
332858 31211 CVE-2008-1094 SECTRACK:1021455  View
332859 31211 CVE-2008-1094 URL:http://securitytracker.com/id?1021455  View
332860 31211 CVE-2008-1094 SECUNIA:33164  View
332861 31211 CVE-2008-1094 URL:http://secunia.com/advisories/33164  View
332862 31211 CVE-2008-1094 SREASON:4793  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56114 JVNDB-2007-004806 MoinMoin におけるクロスサイトスクリプティングの脆弱性 MoinMoin には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1098 31211 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004806.html  View