CVE-2019-17536

Gila CMS up to version 1.11.4 is affected by CVE-2019-17536 due to an Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The vulnerability can be triggered when an attacker uses admin/media_upload and fm/move, allowing upload of a dangerous...