Lucene search
K

5 matches found

CNNVD
CNNVD
added 2024/08/12 12:0 a.m.2 views

Gila CMS 跨站脚本漏洞

Gila CMS is an open source content management system CMS based on PHP and MySQL from Gila CMS. A cross-site scripting vulnerability exists in Gila CMS version 1.10.9, which stems from the parameter content in file /cm/updaterows/page?id=2 that can lead to a cross-site scripting attack...

5.4CVSS4.5AI score0.00296EPSS
Exploits0References4
NVD
NVD
added 2023/06/20 3:15 p.m.10 views

CVE-2020-20726

Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the cm/updaterows/user parameter...

8.8CVSS8.9AI score0.0087EPSS
Exploits1References1
OSV
OSV
added 2023/06/20 3:15 p.m.0 views

CVE-2020-20726

Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the cm/updaterows/user parameter...

8.8CVSS6.1AI score0.0087EPSS
Exploits1References1
Prion
Prion
added 2023/06/20 3:15 p.m.17 views

Cross site request forgery (csrf)

Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the cm/updaterows/user parameter...

6.8CVSS8.9AI score0.0087EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/06/20 12:0 a.m.3 views

PT-2023-11561 · Gila · Gila Cms

Name of the Vulnerable Software and Affected Versions: Gila GilaCMS version 1.11.4 Description: The issue allows a remote attacker to execute arbitrary code via the cm/update rows/user parameter. This is a Cross Site Request Forgery vulnerability. Recommendations: For Gila GilaCMS version 1.11.4,...

8.8CVSS7.8AI score0.0087EPSS
Exploits1References6
Rows per page
Query Builder