Unscored severity · published Jan 7, 2010
CVE-2009-4592
Unspecified vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to include arbitrary local files via unknown…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to include arbitrary local files via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Base · Secureideas
through 1.4.3; 0.9.8; 0.9.9; 1.0; 1.2.4; 1.2.5; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-4592
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-4592
base.secureideas.net
http://base.secureideas.net/news.php
Vendor Advisory
http://secunia.com/advisories/37147
secureideas.cvs.sourceforge.net
http://secureideas.cvs.sourceforge.net/viewvc/secureideas/base-php4/docs/CHANGELOG?revision=1.359&view=markup
Vendor Advisory
http://www.vupen.com/english/advisories/2009/3054
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/53969
More from Base
–
CVE-2012-1017
Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbitrary SQL commands via the (1)…
–
CVE-2009-4591
SQL injection vulnerability in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors
–
CVE-2009-4590
Cross-site scripting (XSS) vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to inject arbitrary web script…