CVE-2012-3399

Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter...

CVE-2012-3399

CVE-2012-3399 describes a remote command execution in Basilic 1.5.14 triggered by unsanitized input in diff.php via the file parameter, allowing an attacker to execute shell commands with the web server user (www-data). The root cause is input verification weaknesses in the affected function. Pub...