143 matches found
CVE-2006-1505: Undefined Security Weakness
basemaintenance.php in Basic Analysis and Security Engine BASE before 1.2.4 melissa, when running in standalone mode, allows remote attackers to bypass authentication, possibly by setting the standalone parameter to "yes"...
CVE-2005-3325: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in 1 acidqrymain.php in Analysis Console for Intrusion Databases ACID 0.9.6b20 and 2 baseqrymain.php in Basic Analysis and Security Engine BASE 1.2, and unspecified other console scripts in these products, allow remote attackers to execute arbitrary SQL...
Basic Analysis and Security Engine (BASE) 1.2 - Base_qry_main.php SQL Injection
Basic Analysis and Security Engine BASE 1.2 - Baseqrymain.php SQL Injection source: https://www.securityfocus.com/bid/15199/info Basic Analysis And Security Engine is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied inpu...