| Package | Affected versions | Patched versions |
|---|---|---|
| basic analysis and security engine | = 1.3.6 |
Basic Analysis and Security Engine (BASE) before 1.3.8 sends a redirect to the web browser but does not exit, which allows remote attackers to bypass authentication via (1) base_main.php, (2) base_qry_alert.php, and possibly other vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free