critical9.1
CVE-2020-5514
Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI.
Impact
Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gilacms | Gila Cms | Version 1.11.8 |