CVE-2012-1199

Exp

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) BASE_path parameter to base_ag_main.php, (2) base_db_setup.php, (3) base_graph_common.php, (4) base_graph_display.php, (5) base_graph_form.php, (6) base_graph_main.php, (7) base_local_rules.php, (8) base_logout.php, (9) base_main.php, (10) base_maintenance.php, (11) base_payload.php, (12) base_qry_alert.php, (13) base_qry_common.php, (14) base_qry_main.php, (15) base_stat_alerts.php, (16) base_stat_class.php, (17) base_stat_common.php, (18) base_stat_ipaddr.php, (19) base_stat_iplink.php, (20) base_stat_ports.php, (21) base_stat_sensor.php, (22) base_stat_time.php, (23) base_stat_uaddr.php, (24) base_user.php, (25) index.php, (26) admin/base_roleadmin.php, (27) admin/base_useradmin.php, (28) admin/index.php, (29) help/base_setup_help.php, (30) includes/base_action.inc.php, (31) includes/base_cache.inc.php, (32) includes/base_db.inc.php, (33) includes/base_db.inc.php, (34) includes/base_include.inc.php, (35) includes/base_output_html.inc.php, (36) includes/base_output_query.inc.php, (37) includes/base_state_criteria.inc.php, (38) includes/base_state_query.inc.php or (39) setup/base_conf_contents.php; (40) GLOBALS[user_session_path] parameter to includes/base_state_common.inc.php; (41) BASE_Language parameter to setup/base_conf_contents.php; or (42) ado_inc_php parameter to setup/setup2.php.

Published: 2012-02-18 Last update: 2026-04-29 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2012-1199 is rated High Exploit Risk (72.7/100): CVSS High severity, with medium exploitation likelihood (EPSS 1.30%). 40 public exploit reference(s) are indexed (Exploit-DB). Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2012-1199

EDB-ID Source Kind Published Link
36757 exploit_db edb 2012-02-11 Exploit-DB ↗
36755 exploit_db edb 2012-02-11 Exploit-DB ↗
36754 exploit_db edb 2012-02-11 Exploit-DB ↗
36753 exploit_db edb 2012-02-11 Exploit-DB ↗
36752 exploit_db edb 2012-02-11 Exploit-DB ↗
36732 exploit_db edb 2012-02-11 Exploit-DB ↗
36731 exploit_db edb 2012-02-11 Exploit-DB ↗
36730 exploit_db edb 2012-02-11 Exploit-DB ↗
36729 exploit_db edb 2012-02-11 Exploit-DB ↗
36728 exploit_db edb 2012-02-11 Exploit-DB ↗
36727 exploit_db edb 2012-02-11 Exploit-DB ↗
36726 exploit_db edb 2012-02-11 Exploit-DB ↗
36725 exploit_db edb 2012-02-11 Exploit-DB ↗
36711 exploit_db edb 2012-02-11 Exploit-DB ↗
36710 exploit_db edb 2012-02-11 Exploit-DB ↗
36709 exploit_db edb 2012-02-11 Exploit-DB ↗
36708 exploit_db edb 2012-02-11 Exploit-DB ↗
36707 exploit_db edb 2012-02-11 Exploit-DB ↗
36706 exploit_db edb 2012-02-11 Exploit-DB ↗
36705 exploit_db edb 2012-02-11 Exploit-DB ↗
36704 exploit_db edb 2012-02-11 Exploit-DB ↗
36703 exploit_db edb 2012-02-11 Exploit-DB ↗
36702 exploit_db edb 2012-02-11 Exploit-DB ↗
36724 exploit_db edb 2012-02-11 Exploit-DB ↗
36723 exploit_db edb 2012-02-11 Exploit-DB ↗
36721 exploit_db edb 2012-02-11 Exploit-DB ↗
36720 exploit_db edb 2012-02-11 Exploit-DB ↗
36719 exploit_db edb 2012-02-11 Exploit-DB ↗
36722 exploit_db edb 2012-02-11 Exploit-DB ↗
36718 exploit_db edb 2012-02-11 Exploit-DB ↗
36717 exploit_db edb 2012-02-11 Exploit-DB ↗
36716 exploit_db edb 2012-02-11 Exploit-DB ↗
36715 exploit_db edb 2012-02-11 Exploit-DB ↗
36714 exploit_db edb 2012-02-11 Exploit-DB ↗
36713 exploit_db edb 2012-02-11 Exploit-DB ↗
36712 exploit_db edb 2012-02-11 Exploit-DB ↗
36759 exploit_db edb 2012-02-11 Exploit-DB ↗
36758 exploit_db edb 2012-02-11 Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2012-1199

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-03-31 1.45% 1.30% -0.15%
2 2026-03-25 1.23% 1.45% +0.22%
3 2026-02-01 — 1.23% —

Full EPSS history (19 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2012-1199

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
7.5 2.0 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
 10.0 6.4 [email protected]

Weakness enumeration for CVE-2012-1199

OS Trackers for CVE-2012-1199

vendor priority summary link
ubuntu medium CVE-2012-1199 medium priority: Ubuntu including 1 source packages (acidbase), 17 status rows across 17 suites (hardy, lucid, maverick, natty, oneiric, precise, quantal, raring, saucy, trusty, upstream, utopic, vivid, wily, xenial, yakkety, zesty): DNE 8, ignored 8, needs-triage 1. https://ubuntu.com/security/CVE-2012-1199

Affected software / configurations for CVE-2012-1199

Vendor Product Version Raw CPE
secureideas basic_analysis_and_security_engine 1.4.5 cpe:2.3:a:secureideas:basic_analysis_and_security_engine:1.4.5:*:*:*:*:*:*:*

References for CVE-2012-1199

cvelogic Threat Intelligence