secureideas BASE Basic Analysis and Security Engine 1.2
Approved changes feed: RSS · Atom
cpe:2.3:a:secureideas:basic_analysis_and_security_engine:1.2:*:*:*:*:*:*:*
part: a version: 1.2 update: *
| Vendor | Secureideas (e5619c6e-b8df-58ae-92ef-4bfff39fa5d2) |
|---|---|
| Product | Basic Analysis And Security Engine (779a74d0-73bf-503a-994c-8545bed23e92) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/nathangibbs3/base |
purl2cpe | 2026-06-01 10:16:00.867209 |
pkg:sourceforge/secureideas |
purl2cpe | 2026-06-01 10:16:00.867211 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-4839 |
vulnerable | 2026-06-08 04:51:50.109972 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE), possibly 1.4.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) admin/base_roleadmin.php, (2) admin/base_useradmin.php, (3) base_conf_contents.php, (4) base_qry_sqlcalls.php, and (5) base_ag_main.php.
Published: 2010-05-05T18:00:00.000Z
Updated: 2024-09-17T03:07:14.170Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4838 |
vulnerable | 2026-06-08 04:51:50.109160 |
Details available
SQL injection vulnerability in base_ag_common.php in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters. NOTE: some of these details are obtained from third party information.
Published: 2010-05-05T18:00:00.000Z
Updated: 2024-09-17T03:59:06.384Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4837 |
vulnerable | 2026-06-08 04:51:50.102148 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) sig[1] parameter to base/base_qry_main.php, or the time[0][1] parameter to (2) base/base_stat_alerts.php or (3) base/base_stat_uaddr.php. NOTE: some of these details are obtained from third party information.
Published: 2010-05-05T18:00:00.000Z
Updated: 2024-09-16T20:21:47.662Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6156 |
vulnerable | 2026-06-08 04:50:08.050276 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in base_qry_main.php in Base Analysis and Security Engine (BASE) before 1.3.9 allow remote attackers to inject arbitrary web script or HTML via the (1) sig[0] and (2) sig[1] parameters.
Published: 2007-11-29T01:00:00.000Z
Updated: 2024-08-07T15:54:26.879Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4878 |
vulnerable | 2026-06-08 04:48:45.436563 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.2, and unspecified other console scripts in these products, allow remote attackers to inject arbitrary web script or HTML via the sig[1] parameter and possibly other parameters, a different vulnerability than CVE-2007-6156.
Published: 2009-02-18T20:00:00.000Z
Updated: 2024-08-08T00:01:23.615Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3325 |
vulnerable | 2026-06-08 04:48:40.366663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.