PT-2023-11747 · Gila Cms · Gila Cms

Name of the Vulnerable Software and Affected Versions: Gila CMS versions 1.15.4 and earlier Description: A SQL injection issue was discovered that allows a remote attacker to execute arbitrary web scripts via the ID parameter after the login portal. Recommendations: For Gila CMS versions 1.15.4 a...

Gila CMS SQL Injection Vulnerability

Gila CMS is an open source content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in Gila CMS prior to version 1.15.4. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

Gila CMS Cross-Site Scripting Vulnerability (CNVD-2023-64115)

Gila CMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in Gila CMS version 1.11.3, which stems from the lack of effective filtering and escaping of user-supplied data by the parameter admuser, and can be exploited by an attacke...

GHSA-RVJP-J5J4-C9J5 Gila CMS Cross-site Scripting Vulnerability

Cross Site Scripting XSS vulnerability in admuser parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation...

Gila CMS Cross-site Scripting Vulnerability

Cross Site Scripting XSS vulnerability in admuser parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation...

CVE-2020-20523

Cross Site Scripting XSS vulnerability in admuser parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation...

CVE-2020-20523

Cross Site Scripting XSS vulnerability in admuser parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation...

Cross site scripting

Cross Site Scripting XSS vulnerability in admuser parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation...

CVE-2020-20523

Cross Site Scripting XSS vulnerability in admuser parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation...

PT-2023-11556 · Gila Cms · Gila Cms

Name of the Vulnerable Software and Affected Versions: Gila CMS version 1.11.3 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the adm user parameter, which allows remote attackers to execute arbitrary code during the Gila CMS installation. Recommendations: For Gi...

Gila CMS 跨站脚本漏洞

Gila CMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in Gila CMS version 1.11.3, which stems from the lack of effective filtering and escaping of user-supplied data by the parameter admuser, and can be exploited by an attacke...

CVE-2020-20523

Gila CMS 1.11.3 has a Cross-Site Scripting (XSS) vulnerability in the adm_user parameter that can allow remote attackers to execute arbitrary code during the installation process (CVE-2020-20523). The NVD entry lists CVSSv3.1: 6.1 (Medium), with Network attack vector, low attack complexity, no pr...

CVE-2020-20523

Cross Site Scripting XSS vulnerability in admuser parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation...

Gila CMS 1.10.9 Remote Code Execution

Exploit Title: Gila CMS 1.10.9 - Remote Code Execution RCE Authenticated Date: 05-07-2023 Exploit Author: Omer Shaik unknownexploit Vendor Homepage: https://gilacms.com/ Software Link: https://github.com/GilaCMS/gila/ Version: Gila 1.10.9 Tested on: Linux import requests from termcolor import...

Gila CMS 1.10.9 - Remote Code Execution (RCE) (Authenticated)

Exploit Title: Gila CMS 1.10.9 - Remote Code Execution RCE Authenticated Date: 05-07-2023 Exploit Author: Omer Shaik unknownexploit Vendor Homepage: https://gilacms.com/ Software Link: https://github.com/GilaCMS/gila/ Version: Gila 1.10.9 Tested on: Linux import requests from termcolor import...

Gila CMS 1.10.9 - Remote Code Execution (Authenticated) Exploit

Exploit Title: Gila CMS 1.10.9 - Remote Code Execution RCE Authenticated Exploit Author: Omer Shaik unknownexploit Vendor Homepage: https://gilacms.com/ Software Link: https://github.com/GilaCMS/gila/ Version: Gila 1.10.9 Tested on: Linux import requests from termcolor import colored from...

Gila CMS 跨站请求伪造漏洞

Gila CMS is an open source content management system CMS based on PHP and MySQL. A security vulnerability exists in Gila CMS version 1.11.4, which stems from the presence of a cross-site request forgery CSRF vulnerability that allows remote attackers to execute arbitrary code via the...

PT-2023-11561 · Gila · Gila Cms

Name of the Vulnerable Software and Affected Versions: Gila GilaCMS version 1.11.4 Description: The issue allows a remote attacker to execute arbitrary code via the cm/update rows/user parameter. This is a Cross Site Request Forgery vulnerability. Recommendations: For Gila GilaCMS version 1.11.4,...

Gila CMS Cross-Site Scripting Vulnerability (CNVD-2021-84281)

Gila CMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in Gila CMS version 2.2.0, which can be used by an attacker to steal cookies, passwords, or run arbitrary code on a victim's browser...

Gila CMS Information Disclosure Vulnerability

Gila CMS is an open source content management system CMS based on PHP and MySQL. Gila CMS 2.2.0 is vulnerable to an information disclosure vulnerability that could be exploited by attackers to cause sensitive information to be compromised...