Candidate: CVE-2009-4838 PublicDate: 2010-05-06 12:47:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4838 Description: SQL injection vulnerability in base_ag_common.php in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters. NOTE: some of these details are obtained from third party information. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_acidbase: upstream_acidbase: released (1.4.4) dapper_acidbase: ignored (reached end-of-life) hardy_acidbase: ignored (reached end-of-life) jaunty_acidbase: ignored (reached end-of-life) karmic_acidbase: ignored (reached end-of-life) lucid_acidbase: not-affected (1.4.4-3ubuntu1) maverick_acidbase: not-affected (1.4.4-3ubuntu1) natty_acidbase: not-affected (1.4.4-3ubuntu1) oneiric_acidbase: not-affected (1.4.4-3ubuntu1) devel_acidbase: not-affected (1.4.4-3ubuntu1)