2 matches found
CVE-2019-17536
Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/mediaupload and fm/move...
9.9CVSS6.2AI score0.02254EPSS
SaveExploits1References2
Unrestricted file upload
Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/mediaupload and fm/move...
4CVSS5.1AI score0.02254EPSS
SaveExploits1References2Affected Software1
20