Remco Verhoef has discovered a vulnerability in Basic Analysis and Security Engine (BASE), which can be exploited by malicious users to conduct SQL injection attacks.

Input passed to the "sig[1]" parameter in "base_qry_main.php" isn't properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Example:
http://[host]/base/base_qry_main.php?new=1&sig[0]=%3D&sig[1]=[SQL]&submit=Query+DB

Successful exploitation requires that "magic_quotes_gpc" is disabled.

The vulnerability has been confirmed in version 1.2. Other versions may also be affected.

Solution
Update to version 1.2.1.
Further details available to Secunia VIM customers

Provided and/or discovered by
Remco Verhoef

Changelog
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers