Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2020-20726
Disclosure Date: June 20, 2023 (last updated October 08, 2023)
Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the cm/update_rows/user parameter.
0
Attacker Value
Unknown
CVE-2020-20693
Disclosure Date: September 27, 2021 (last updated February 23, 2025)
A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.
0
Attacker Value
Unknown
CVE-2020-20695
Disclosure Date: September 27, 2021 (last updated February 23, 2025)
A stored cross-site scripting (XSS) vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file.
0
Attacker Value
Unknown
CVE-2020-20692
Disclosure Date: September 27, 2021 (last updated February 23, 2025)
GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.
0
Attacker Value
Unknown
CVE-2020-20696
Disclosure Date: September 27, 2021 (last updated February 23, 2025)
A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field.
0
