CVE-2005-3325

CVE-2005-3325 describes multiple SQL injection vulnerabilities in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and Basic Analysis and Security Engine (BASE) 1.2, specifically affecting scripts like acid_qry_main.php and base_qry_main.php. Attackers can exploit these flaws, notably via the sig[1] parameter, to execute arbitrary SQL commands. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing unauthenticated remote attackers to achieve partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit for BASE 1.2 is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.