Approved changes feed: RSS · Atom

cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.2.4:*:*:*:*:*:*:*

part: a version: 1.2.4 update: *

VendorKevin Johnson (dbbb05ec-47c0-574a-912a-7a91daa50d5c)
ProductBasic Analysis And Security Engine (e8c1da0e-f036-546c-a3d3-7387e4e64acb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jbouse-debian/acidbase purl2cpe 2026-06-01 10:11:01.362615

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-2685 vulnerable 2026-06-08 04:49:07.333292 Details available
PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the BASE_path parameter to (1) base_qry_common.php, (2) base_stat_common.php, and (3) includes/base_include.inc.php.
Published: 2006-05-31T10:00:00.000Z
Updated: 2024-08-07T17:58:51.920Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1590 vulnerable 2026-06-08 04:48:57.540262 Details available
Cross-site scripting (XSS) vulnerability in the PrintFreshPage function in (1) Basic Analysis and Security Engine (BASE) 1.2.4 and (2) Analysis Console for Intrusion Databases (ACID) 0.9.6b23 allows remote attackers to inject arbitrary web script or HTML via the (a) back parameter to base_graph_main.php, (b) netmask parameter to base_stat_ipaddr.php, or (c) submit parameter to base_qry_alert.php within BASE, or (d) query string to acid_main.php in ACID, which causes the request URI ($_SERVER['REQUEST_URI']) to be inserted into a refresh operation.
Published: 2006-04-03T10:00:00.000Z
Updated: 2024-08-07T17:19:48.639Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.