RSS   Vulnerabilities for 'Basilic'   RSS

2012-07-12
 
CVE-2012-3399

CWE-20
 

 
Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.

 
2009-08-20
 
CVE-2009-2881

 

 
Multiple SQL injection vulnerabilities in Basilic 1.5.13 allow remote attackers to execute arbitrary SQL commands via the idAuthor parameter to (1) index.php and possibly (2) allpubs.php in publications/.

 


Copyright 2024, cxsecurity.com

 

Back to Top