high7.2
CVE-2020-28692
In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing PHP files.
Impact
In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing PHP files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gilacms | Gila Cms | Version 1.16.0 |