high7.5Public exploit code
CVE-2012-1198
base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbitrary code by uploading contents of the file with an…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_ag_main.php' Crafted Arbitrary File Upload / Arbitrary Code Execution2012-02-11 · webapps · php · Verified
Impact
base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbitrary code by uploading contents of the file with an executable extension via a create action, then accessing it via a view action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Secureideas | Basic Analysis And Security Engine | Version 1.4.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/files/109663/BASE-1.4.5-Remote-File-Inclusion-Shell-Creation.html
- http://www.securityfocus.com/bid/51979
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73201
- http://packetstormsecurity.org/files/109663/BASE-1.4.5-Remote-File-Inclusion-Shell-Creation.html
- http://www.securityfocus.com/bid/51979
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73201