CVE-2012-1017: Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (BASE) 1....

Security readout for executives and security teams

CVE-2012-1017 is a remote SQL injection issue in Basic Analysis and Security Engine (BASE) 1.4.5. The vulnerable page can pass attacker-controlled input into database queries, which may expose or alter security-monitoring data. The source bundle does not name a patch, mitigation, or active exploitation. Exposure is most likely where legacy BASE 1.4.5 remains deployed and base_qry_main.php is reachable by untrusted users. Public internet exposure raises urgency. The bundle does not identify other affected versions or supported product branches. Prioritize within legacy-application risk work. If BASE 1.4.5 is internet-facing or protects security-monitoring workflows, treat remediation as urgent because compromise could affect security event visibility and database integrity. Mitigation focus: Check vendor or maintainer guidance for a fixed BASE version or official mitigation.; Remove or upgrade BASE 1.4.5 if it is still deployed.; Restrict access to BASE interfaces to trusted administrative networks only..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.