Basic Analysis and Security Engine (BASE) 1.4.5 - base_local_rules.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - baselocalrules.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

CVE-2009-4590

Cross-site scripting XSS vulnerability in baselocalrules.php in Basic Analysis and Security Engine BASE before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4592

BASE prior to 1.4.4 is affected by CVE-2009-4592: an unspecified vulnerability in base_local_rules.php allows remote attackers to include arbitrary local files via unknown vectors. The OpenVAS entries also describe multiple input-validation vulnerabilities in BASE before 1.4.4, including local fi...