CVE-2009-4837

CVE-2009-4837 involves multiple cross-site scripting (XSS) vulnerabilities in the Basic Analysis and Security Engine (BASE) prior to version 1.4.3.1. The affected components allow remote attackers to inject arbitrary web script or HTML via the following parameters: (1) sig[1] in base/base_qry_mai...

CVE-2009-4838

CVE-2009-4838 : A SQL injection vulnerability exists in Base_Ag_Common.php of the Basic Analysis and Security Engine (BASE) before version 1.4.3.1. Remote attackers can execute arbitrary SQL commands via unspecified parameters due to inadequate input handling. This risk affects BASE deployments r...

CVE-2009-4839

The CVE-2009-4839 entry concerns the Basic Analysis and Security Engine (BASE), likely versions 1.4.4 and earlier. The issue comprises multiple input-validation vulnerabilities in BASE allowing remote attackers to inject arbitrary web script or HTML (XSS) via parameters to admin/base_roleadmin.ph...