CVE-2005-3325
Analysis Console for Intrusion Databases and Basic Analysis and Security Engine - SQL Injection via sig Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-3325. PoCs published by Remco Verhoef.
AI-analyzed exploit summary The exploit describes an SQL injection vulnerability in Basic Analysis And Security Engine (BASE) due to improper input sanitization. The provided URL demonstrates how an attacker can inject arbitrary SQL queries via the 'sig[1]' parameter.
Description
Multiple SQL injection vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.2, and unspecified other console scripts in these products, allow remote attackers to execute arbitrary SQL commands via the sig[1] parameter and possibly other parameters.
Exploits (1)
The exploit describes an SQL injection vulnerability in Basic Analysis And Security Engine (BASE) due to improper input sanitization. The provided URL demonstrates how an attacker can inject arbitrary SQL queries via the 'sig[1]' parameter.