CVE-2012-3399

CVE-2012-3399 describes a remote command execution in Basilic 1.5.14 triggered by unsanitized input in diff.php via the file parameter, allowing an attacker to execute shell commands with the web server user (www-data). The root cause is input verification weaknesses in the affected function. Pub...

CVE-2009-2881

CVE-2009-2881 : The affected software is Basilic 1.5.13. The issue is multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the idAuthor parameter to (1) index.php and possibly (2) allpubs.php in publications/. The vulnerability enables unauthent...