Multiple SQL injection vulnerabilities in Basilic 1.5.13 allow remote attackers to execute arbitrary SQL commands via the idAuthor parameter to (1) index.php and possibly (2) allpubs.php in publications/.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 67.6%