Test ID:	1.3.6.1.4.1.25623.1.0.14304
Category:	Web application abuses
Title:	BasiliX Arbitrary Command Execution Vulnerability
Summary:	The remote web server contains a BasiliX PHP script that; is prone to arbitrary.
Description:	Summary: The remote web server contains a BasiliX PHP script that is prone to arbitrary. Vulnerability Insight: The remote host appears to be running a version of BasiliX between 1.0.2beta or 1.0.3beta. In such versions, the script 'login.php3' fails to sanitize user input, which enables a remote attacker to pass in a specially crafted value for the parameter 'username' with arbitrary commands to be executed on the target using the permissions of the web server. Solution: Upgrade to BasiliX version 1.1.0 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Copyright	Copyright (C) 2004 George A. Theall

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.