4 matches found
CVE-2020-5515
Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection.
CVE-2020-5514
Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI.
CVE-2020-5512
Gila CMS 1.11.8 allows /admin/media?path=../ Path Traversal.
CVE-2020-5513
Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal.