CVE-2009-4591

SQL injection vulnerability in Basic Analysis and Security Engine BASE before 1.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4592

BASE prior to 1.4.4 is affected by CVE-2009-4592: an unspecified vulnerability in base_local_rules.php allows remote attackers to include arbitrary local files via unknown vectors. The OpenVAS entries also describe multiple input-validation vulnerabilities in BASE before 1.4.4, including local fi...

CVE-2009-4592

Unspecified vulnerability in baselocalrules.php in Basic Analysis and Security Engine BASE before 1.4.4 allows remote attackers to include arbitrary local files via unknown vectors...

CVE-2009-4592: Undefined Security Weakness

Unspecified vulnerability in baselocalrules.php in Basic Analysis and Security Engine BASE before 1.4.4 allows remote attackers to include arbitrary local files via unknown vectors...

CVE-2009-4590: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in baselocalrules.php in Basic Analysis and Security Engine BASE before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4591: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Basic Analysis and Security Engine BASE before 1.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Basic Analysis and Security Engine Detection

This host is running Basic Analysis and Security Engine BASE. BASE provides a web front-end to query and analyze the alerts coming from a SNORT IDS system. OpenVAS Vulnerability Test $Id: basedetect.nasl 5720 2017-03-24 14:15:57Z cfi $ Basic Analysis and Security Engine Detection Authors: Michael...

Basic Analysis and Security Engine Detection

This host is running Basic Analysis and Security Engine BASE. BASE provides a web front-end to query and analyze the alerts coming from a SNORT IDS system. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2005-4878: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in 1 acidqrymain.php in Analysis Console for Intrusion Databases ACID 0.9.6b20 and 2 baseqrymain.php in Basic Analysis and Security Engine BASE 1.2, and unspecified other console scripts in these products, allow remote attackers to inject arbitrar...

CVE-2007-5578: Improper Authentication

Basic Analysis and Security Engine BASE before 1.3.8 sends a redirect to the web browser but does not exit, which allows remote attackers to bypass authentication via 1 basemain.php, 2 baseqryalert.php, and possibly other vectors...

CVE-2006-2685: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in Basic Analysis and Security Engine BASE 1.2.4 and earlier, with registerglobals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the BASEpath parameter to 1 baseqrycommon.php, 2 basestatcommon.php, and 3...

BASE <= 1.2.4 melissa (Snort Frontend) Remote Inclusion Vulnerabilities

No description provided by source. Basic Analysis and Security Engine BASE = 1.2.4 melissa Inclusion Vulnerabilities Just glanced over BASE for a pentesting job. /str0ke ! milw0rm.com code baseqrycommon.php includeonce"$BASEpath/includes/basesignature.inc.php"; /code...

CVE-2006-1590: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the PrintFreshPage function in 1 Basic Analysis and Security Engine BASE 1.2.4 and 2 Analysis Console for Intrusion Databases ACID 0.9.6b23 allows remote attackers to inject arbitrary web script or HTML via the a back parameter to basegraphmain.php, b...

CVE-2006-1505

basemaintenance.php in Basic Analysis and Security Engine BASE before 1.2.4 melissa, when running in standalone mode, allows remote attackers to bypass authentication, possibly by setting the standalone parameter to "yes"...

CVE-2006-1505: Undefined Security Weakness

basemaintenance.php in Basic Analysis and Security Engine BASE before 1.2.4 melissa, when running in standalone mode, allows remote attackers to bypass authentication, possibly by setting the standalone parameter to "yes"...

CVE-2005-3325: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in 1 acidqrymain.php in Analysis Console for Intrusion Databases ACID 0.9.6b20 and 2 baseqrymain.php in Basic Analysis and Security Engine BASE 1.2, and unspecified other console scripts in these products, allow remote attackers to execute arbitrary SQL...