Lucene search
+L

2 matches found

OpenVAS
OpenVAS
added 2012/02/10 12:0 a.m.48 views

BASE 'base_qry_main.php' SQLi Vulnerability

BASE is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

7.5CVSS7.4AI score0.01441EPSS
SaveExploits2References1
CVE
CVE
added 2012/02/08 12:0 a.m.47 views

CVE-2012-1017

BASE 1.4.5 is vulnerable to SQL injection in base_qry_main.php via ip_addr[0][1], ip_addr[0][2], and ip_addr[0][9], caused by insufficient sanitization of user input. This can allow remote attackers to execute arbitrary SQL commands. Exploitation details and remediation are not provided in the av...

7.5CVSS8.7AI score0.01441EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder