Secureideas Base vulnerabilities
4 known vulnerabilities affecting secureideas/base.
Total CVEs
4
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH3MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2012-1017P3HIGHCVSS 7.5PoCv1.4.52012-02-08
CVE-2012-1017 [HIGH] CWE-89 CVE-2012-1017: Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (B
Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbitrary SQL commands via the (1) ip_addr[0][1], (2) ip_addr[0][2], or (3) ip_addr[0][9] parameters.
nvd
CVE-2009-4591P3HIGHCVSS 7.5≤ 1.4.3v0.9.8+12 more2010-01-07
CVE-2009-4591 [HIGH] CWE-89 CVE-2009-4591: SQL injection vulnerability in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote
SQL injection vulnerability in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
nvd
CVE-2009-4592P4HIGHCVSS 7.5≤ 1.4.3v0.9.8+12 more2010-01-07
CVE-2009-4592 [HIGH] CVE-2009-4592: Unspecified vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) befor
Unspecified vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to include arbitrary local files via unknown vectors.
nvd
CVE-2009-4590P4MEDIUMCVSS 4.3≤ 1.4.3v0.9.8+12 more2010-01-07
CVE-2009-4590 [MEDIUM] CWE-79 CVE-2009-4590: Cross-site scripting (XSS) vulnerability in base_local_rules.php in Basic Analysis and Security Engi
Cross-site scripting (XSS) vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd