Gilacms Gila Cms vulnerabilities

• gila cms, gilacms gila cms +1 more Gila CMS HTTP POST Request page cross site scripting CVE-2024-7657 5.3 MediumAugust 11, 2024
• gilacms gila cms Gila CMS SQL Injection vulnerability CVE-2020-26625 3.8 LowJanuary 2, 2024
• gilacms gila cms Gila CMS SQL Injection vulnerability CVE-2020-26624 3.8 LowJanuary 2, 2024
• gilacms gila cms Gila CMS SQL Injection CVE-2020-26623 3.8 LowJanuary 2, 2024
• gilacms gila cms Gila CMS Cross-site Scripting Vulnerability CVE-2020-20523 Fix available 6.1 MediumAugust 11, 2023
• gilacms gila cms GilaCMS Cross Site Request Forgery vulnerability CVE-2020-20726 8.8 HighJune 20, 2023
• gilacms gila cms A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this... CVE-2021-39486 5.4 MediumOctober 4, 2021
• gilacms gila cms Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by... CVE-2021-37777 7.5 HighOctober 4, 2021
• gilacms gila cms Cross-Site Request Forgery in GilaCMS CVE-2020-20693 8.8 HighSeptember 27, 2021
• gilacms gila cms Cross-site Scripting in GilaCMS CVE-2020-20696 5.4 MediumSeptember 27, 2021
• gilacms gila cms Cross-site Scripting in GilaCMS CVE-2020-20695 5.4 MediumSeptember 27, 2021
• gilacms gila cms GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter... CVE-2020-20692 7.2 HighSeptember 27, 2021
• gilacms gila cms In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the... CVE-2020-28692 7.2 HighNovember 16, 2020
• gilacms gila cms Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which... CVE-2019-20803 6.1 MediumMay 21, 2020
• gilacms gila cms Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to... CVE-2019-20804 8.8 HighMay 21, 2020
• gilacms gila cms Gila CMS 1.11.8 allows /admin/media?path=../ Path Traversal. CVE-2020-5512 EPSS 18.9% 6.8 MediumJanuary 6, 2020
• gilacms gila cms Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal. CVE-2020-5513 EPSS 25.8% 6.8 MediumJanuary 6, 2020
• gilacms gila cms Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to... CVE-2020-5514 EPSS 44.1% 9.1 CriticalJanuary 6, 2020
• gilacms gila cms Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection. CVE-2020-5515 Public exploit EPSS 26.5% 7.2 HighJanuary 6, 2020
• gilacms gila cms Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the... CVE-2019-17536 9.9 CriticalOctober 13, 2019
• gilacms gila cms Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via... CVE-2019-17535 9.3 CriticalOctober 13, 2019
• gilacms gila cms Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion. CVE-2019-16679 Public exploit 4.9 MediumSeptember 21, 2019
• gilacms gila cms Gila CMS 1.9.1 has XSS. CVE-2019-9647 Public exploit 6.1 MediumJune 5, 2019
• gilacms gila cms core/classes/db_backup.php in Gila CMS 1.10.1 allows admin/db_backup?download= absolute path... CVE-2019-11515 4.9 MediumApril 25, 2019
• gilacms gila cms Gila CMS 1.10.1 allows fm/save CSRF for executing arbitrary PHP code. CVE-2019-11456 8.8 HighApril 22, 2019