CVE-2012-1198 base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbitrary code by uploading contents of the file with an executable extension via a create action...
HighCVSS 7.5
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbitrary code by uploading contents of the file with an executable extension via a create action, then accessing it via a view action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| secureideas basic analysis and security engine | = 1.4.5 | No fix listed |
References
- packetstormsecurity.org exploit
- 51979 exploit vdb-entry
- base-baseagmain-security-bypass(73201) vdb-entry