CVE-2020-5514

creationtimestamp| type| source ---|---|--- 2024-03-19 19:11:50+00:00| seen| https://t.me/ctinow/211851...

Gila CMS Remote Code Execution (CVE-2020-5514)

A remote code execution vulnerability exists in Gila CMS. The vulnerability is due to improper validation of user supplied files during image upload...

CVE-2020-5514

Gila CMS 1.11.8 is affected by CVE-2020-5514 due to an unrestricted upload of dangerous file types via the lzld/thumb?src= URI (via .phar or .phtml). Root cause is improper validation of user-supplied files during image upload, enabling remote code execution. The connected documents confirm the v...

CVE-2020-5514

Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI...