high7.2
CVE-2020-20692
GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.
Impact
GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gilacms | Gila Cms | Version 1.11.4 |