base_maintenance.php in Basic Analysis and Security Engine (BASE) before 1.2.4 (melissa) when running in standalone mode allows remote attackers to bypass authentication possibly by setting the standalone parameter to \yes\.