[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjKBW996BOmD_8z7EVPLyYb_GnCuZcicz3kmvDoxRoXI":3,"g5a-risk:CVE-2008-1094":137},{"success":4,"data":5,"meta":135},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":89,"weaknesses":90,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":98,"seoMetadata":99,"configurations":124,"relatedVendorCves":133,"notableEvents":134},"CVE-2008-1094","What is CVE-2008-1094?","SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a pattern_x parameter in a search_count_equals action, as demonstrated by the pattern_0 parameter.","SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows remote authenticated administrato...","2008-12-19T17:30:02.827","2026-06-16T22:50:58.683",6.5,"AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":4,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","SINGLE","PARTIAL","",null,"MEDIUM",8,6.4,false,[],0.0198,[34,34,34,34,34,34,34],"Medium",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"barracuda_networks","barracuda_spam_firewall","*","cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:*:*:*:*:*:*:*:*",1,[45,50,55,59,63,67,71,75,77,79,81,83,85,87],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fdcsl.ul.ie\u002Fadvisories\u002F02.htm","Ul",[49],"Exploit",{"url":51,"source":52,"tags":53},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F33164","Secunia",[54],"Vendor Advisory",{"url":56,"source":57,"tags":58},"http:\u002F\u002Fsecurityreason.com\u002Fsecurityalert\u002F4793","Securityreason",[],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fsecuritytracker.com\u002Fid?1021455","Securitytracker",[],{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.barracudanetworks.com\u002Fns\u002Fsupport\u002Ftech_alert.php","Barracudanetworks",[54],{"url":68,"source":69,"tags":70},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F499293\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":72,"source":73,"tags":74},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F7496","Exploit-db",[],{"url":46,"source":47,"tags":76},[49],{"url":51,"source":52,"tags":78},[54],{"url":56,"source":57,"tags":80},[],{"url":60,"source":61,"tags":82},[],{"url":64,"source":65,"tags":84},[54],{"url":68,"source":69,"tags":86},[],{"url":72,"source":73,"tags":88},[],14,[91],{"id":92,"name":93,"description":94,"extendedDescription":27,"status":95,"abstraction":96,"structure":97},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","Stable","Base","Simple",[],{"title":100,"metaDescription":101,"keywords":102,"canonicalUrl":103,"structuredData":104},"What is CVE-2008-1094? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2008-1094, a medium severity cyber security vulnerability from 2008. SQL injection vulnerability in index.cgi in the Account Vi...","CVE-2008-1094, CVE-2008-1094 vulnerability, CVE-2008-1094 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2008, CVSS score, exploit, patch, remediation, barracuda_networks security, barracuda_spam_firewall vulnerability","\u002Fwhat-is\u002Fcve-2008-1094",{"@context":105,"@type":106,"headline":100,"description":101,"datePublished":10,"dateModified":11,"author":107,"publisher":111,"about":115,"mainEntityOfPage":119,"articleSection":122,"keywords":123},"https:\u002F\u002Fschema.org","TechArticle",{"@type":108,"name":109,"url":110},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":108,"name":109,"url":110,"logo":112},{"@type":113,"url":114},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":116,"name":6,"description":117,"additionalType":118},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":120,"@id":121},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2008-1094","Cybersecurity","CVE-2008-1094, CVE-2008-1094 vulnerability, CVE-2008-1094 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[125],{"Operator":28,"Negate":28,"Nodes":126},[127],{"Operator":128,"Negate":32,"CPEMatch":129},"OR",[130],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":131,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":132},"BD01511D-F23B-4C4C-9CB6-BC8483DCAC96","3.5.11.020",[],[],{"lastModified":11,"cacheTime":136,"version":22},1792367733040,{"score":138,"band":36,"action":139,"scoredAt":140},46,"Plan remediation","2026-10-17T06:36:13.833497+00:00"]