Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

basic analysis and security engine vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2009-4837
Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE) prior to 1.4.3.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) sig[1] parameter to base/base_qry_main.php, or the time[0][1] parameter to (2) base/ba...
Secureideas Basic Analysis And Security EngineSecureideas Basic Analysis And Security Engine 1.2Secureideas Basic Analysis And Security Engine 1.1.4Secureideas Basic Analysis And Security Engine 1.3.6Secureideas Basic Analysis And Security Engine 1.2.7Secureideas Basic Analysis And Security Engine 1.2.2Secureideas Basic Analysis And Security Engine 1.2.1Secureideas Basic Analysis And Security Engine 1.1.2Secureideas Basic Analysis And Security Engine 1.1Secureideas Basic Analysis And Security Engine 1.3.8Secureideas Basic Analysis And Security Engine 1.3.9Secureideas Basic Analysis And Security Engine 1.2.4Secureideas Basic Analysis And Security Engine 1.2.5Secureideas Basic Analysis And Security Engine 1.2.6Secureideas Basic Analysis And Security Engine 1.2.0Secureideas Basic Analysis And Security Engine 1.1.3Secureideas Basic Analysis And Security Engine 1.3.5
7.5
CVSSv2
CVE-2009-4838
SQL injection vulnerability in base_ag_common.php in Basic Analysis and Security Engine (BASE) prior to 1.4.3.1 allows remote malicious users to execute arbitrary SQL commands via unspecified parameters. NOTE: some of these details are obtained from third party information.
Secureideas Basic Analysis And Security EngineSecureideas Basic Analysis And Security Engine 1.2Secureideas Basic Analysis And Security Engine 1.3.6Secureideas Basic Analysis And Security Engine 1.3.8Secureideas Basic Analysis And Security Engine 1.2.1Secureideas Basic Analysis And Security Engine 1.1.2Secureideas Basic Analysis And Security Engine 1.1Secureideas Basic Analysis And Security Engine 1.1.4Secureideas Basic Analysis And Security Engine 1.2.4Secureideas Basic Analysis And Security Engine 1.2.5Secureideas Basic Analysis And Security Engine 1.2.6Secureideas Basic Analysis And Security Engine 1.2.7Secureideas Basic Analysis And Security Engine 1.2.0Secureideas Basic Analysis And Security Engine 1.2.2Secureideas Basic Analysis And Security Engine 1.1.3Secureideas Basic Analysis And Security Engine 1.3.5Secureideas Basic Analysis And Security Engine 1.3.9
4.3
CVSSv2
CVE-2009-4839
Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE), possibly 1.4.4 and previous versions, allow remote malicious users to inject arbitrary web script or HTML via unspecified parameters to (1) admin/base_roleadmin.php, (2) admin/base_u...
Secureideas Basic Analysis And Security Engine 1.2.2Secureideas Basic Analysis And Security Engine 1.1.2Secureideas Basic Analysis And Security Engine 1.3.9Secureideas Basic Analysis And Security Engine 1.2.4Secureideas Basic Analysis And Security Engine 1.1.4Secureideas Basic Analysis And Security Engine 1.1.3Secureideas Basic Analysis And Security Engine 1.3.6Secureideas Basic Analysis And Security Engine 1.3.5Secureideas Basic Analysis And Security EngineSecureideas Basic Analysis And Security Engine 1.2.0Secureideas Basic Analysis And Security Engine 1.2.5Secureideas Basic Analysis And Security Engine 1.2.6Secureideas Basic Analysis And Security Engine 1.2.7Secureideas Basic Analysis And Security Engine 1.2Secureideas Basic Analysis And Security Engine 1.2.1Secureideas Basic Analysis And Security Engine 1.1Secureideas Basic Analysis And Security Engine 1.3.8Secureideas Basic Analysis And Security Engine 1.4.3
4.3
CVSSv2
CVE-2007-6156
Multiple cross-site scripting (XSS) vulnerabilities in base_qry_main.php in Base Analysis and Security Engine (BASE) prior to 1.3.9 allow remote malicious users to inject arbitrary web script or HTML via the (1) sig[0] and (2) sig[1] parameters.
Secureideas Basic Analysis And Security EngineSecureideas Basic Analysis And Security Engine 1.1.4Secureideas Basic Analysis And Security Engine 1.3.6Secureideas Basic Analysis And Security Engine 1.2.7Secureideas Basic Analysis And Security Engine 1.2Secureideas Basic Analysis And Security Engine 1.2.2Secureideas Basic Analysis And Security Engine 1.2.1Secureideas Basic Analysis And Security Engine 1.1.2Secureideas Basic Analysis And Security Engine 1.3.5Secureideas Basic Analysis And Security Engine 1.2.4Secureideas Basic Analysis And Security Engine 1.2.5Secureideas Basic Analysis And Security Engine 1.2.6Secureideas Basic Analysis And Security Engine 1.2.0Secureideas Basic Analysis And Security Engine 1.1Secureideas Basic Analysis And Security Engine 1.1.3
5
CVSSv2
CVE-2006-1505
base_maintenance.php in Basic Analysis and Security Engine (BASE) prior to 1.2.4 (melissa), when running in standalone mode, allows remote malicious users to bypass authentication, possibly by setting the standalone parameter to "yes".
Basic Analysis And Security Engine Base 1.1.2 ZoraBasic Analysis And Security Engine Base 1.1.3 LynnBasic Analysis And Security Engine Base 1.2 BettyBasic Analysis And Security Engine Base 1.1.4 CherylBasic Analysis And Security Engine Base 1.1 ElizabethBasic Analysis And Security Engine Base 1.2.1 KrisBasic Analysis And Security Engine Base 1.2.2 Cindy
4.3
CVSSv2
CVE-2006-1590
Cross-site scripting (XSS) vulnerability in the PrintFreshPage function in (1) Basic Analysis and Security Engine (BASE) 1.2.4 and (2) Analysis Console for Intrusion Databases (ACID) 0.9.6b23 allows remote malicious users to inject arbitrary web script or HTML via the (a) back pa...
Kevin Johnson Basic Analysis And Security Engine 1.0.2Kevin Johnson Basic Analysis And Security Engine 1.1Kevin Johnson Basic Analysis And Security Engine 1.1.2Roman Danyliw Analysis Console For Intrusion Databases \\(acid\\) 0.9.6b23Kevin Johnson Basic Analysis And Security Engine 0.9.8Kevin Johnson Basic Analysis And Security Engine 0.9.9Kevin Johnson Basic Analysis And Security Engine 1.2.0Kevin Johnson Basic Analysis And Security Engine 1.2.1Kevin Johnson Basic Analysis And Security Engine 1.0Kevin Johnson Basic Analysis And Security Engine 1.0.1Kevin Johnson Basic Analysis And Security Engine 1.2.2Kevin Johnson Basic Analysis And Security Engine 1.2.4Kevin Johnson Basic Analysis And Security Engine 0.9.7Kevin Johnson Basic Analysis And Security Engine 0.9.7.1Kevin Johnson Basic Analysis And Security Engine 1.1.3Kevin Johnson Basic Analysis And Security Engine 1.1.4
4
CVSSv2
CVE-2006-2685
PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and previous versions, with register_globals enabled, allows remote malicious users to execute arbitrary PHP code via a URL in the BASE_path parameter to (1) base_qry_common.php, (2) base_s...
Kevin Johnson Basic Analysis And Security Engine 1.2.2Kevin Johnson Basic Analysis And Security Engine 1.2.4Kevin Johnson Basic Analysis And Security Engine 1.2.0Kevin Johnson Basic Analysis And Security Engine 1.2.1
7.5
CVSSv2
CVE-2012-1199
Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote malicious users to execute arbitrary PHP code via a URL in the (1) BASE_path parameter to base_ag_main.php, (2) base_db_setup.php, (3) base_graph_common.php, (4) bas...
Secureideas Basic Analysis And Security Engine 1.4.5
7.5
CVSSv2
CVE-2007-5578
Basic Analysis and Security Engine (BASE) prior to 1.3.8 sends a redirect to the web browser but does not exit, which allows remote malicious users to bypass authentication via (1) base_main.php, (2) base_qry_alert.php, and possibly other vectors.
Secureideas Basic Analysis And Security Engine 1.3.6
7.5
CVSSv2
CVE-2012-1198
base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote malicious users to execute arbitrary code by uploading contents of the file with an executable extension via a create action, then accessing it via a view action.
Secureideas Basic Analysis And Security Engine 1.4.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook