CVE:CVE-2007-6156
CNNVD:CNNVD-200711-391
Base Analysis和Security Engine (BASE)中的base_qry_main.php存在多个跨站脚本攻击漏洞，远程攻击者借助(1) sig[0]和(2) sig[1]参数注入任意web脚本或HTML。
solution:Upgrade secureideas basic_analysis_and_security_engine to a higher version than 1.3.8,1.1,1.1.2,1.1.3,1.1.4,1.2,1.2.0,1.2.1,1.2.2,1.2.4,1.2.5,1.2.6,1.2.7,1.3.5,1.3.6,and avoid the version (,1.3.8],1.1,1.1.2,1.1.3,1.1.4,1.2,1.2.0,1.2.1,1.2.2,1.2.4,1.2.5,1.2.6,1.2.7,1.3.5,1.3.6