CVE-2012-3399 Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.
HighCVSS 7.5
EPSS 65.3%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| artis.imag basilic | = 1.5.14 | No fix listed |
References
- 20120630 Basilic RCE bug mailing-list
- 20120706 Re: Basilic RCE bug mailing-list
- 19631 exploit
- [oss-security] 20120710 CVE-request: Basilic 1.5.14 diff.php remote code execution vulnerability mailing-list
- [oss-security] 20120709 Re: CVE-request: Basilic 1.5.14 diff.php remote code execution vulnerability mailing-list
- 54234 exploit vdb-entry
- basilic-diff-command-execution(76667) vdb-entry