medium4.9Public exploit code
CVE-2019-16679
Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Gila CMS < 1.11.1 - Local File Inclusion2019-09-23 · webapps · multiple
Impact
Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gilacms | Gila Cms | before 1.11.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/154578/Gila-CMS-Local-File-Inclusion.html
- https://github.com/GilaCMS/gila/issues/33
- https://github.com/GilaCMS/gila/releases/tag/1.11.1
- http://packetstormsecurity.com/files/154578/Gila-CMS-Local-File-Inclusion.html
- https://github.com/GilaCMS/gila/issues/33
- https://github.com/GilaCMS/gila/releases/tag/1.11.1