Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (22 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2020-26624 1 Gilacms 1 Gila Cms 2025-06-17 3.8 Low
A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the ID parameter after the login portal.
CVE-2020-26623 1 Gilacms 1 Gila Cms 2025-06-03 3.8 Low
SQL Injection vulnerability discovered in Gila CMS 1.15.4 and earlier allows a remote attacker to execute arbitrary web scripts via the Area parameter under the Administration>Widget tab after the login portal.
CVE-2020-26625 1 Gilacms 1 Gila Cms 2025-05-16 3.8 Low
A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the 'user_id' parameter after the login portal.
CVE-2020-20726 1 Gilacms 1 Gila Cms 2024-12-11 8.8 High
Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the cm/update_rows/user parameter.
CVE-2020-5515 1 Gilacms 1 Gila Cms 2024-11-21 7.2 High
Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection.
CVE-2020-5514 1 Gilacms 1 Gila Cms 2024-11-21 9.1 Critical
Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI.
CVE-2020-5513 1 Gilacms 1 Gila Cms 2024-11-21 6.8 Medium
Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal.
CVE-2020-5512 1 Gilacms 1 Gila Cms 2024-11-21 6.8 Medium
Gila CMS 1.11.8 allows /admin/media?path=../ Path Traversal.
CVE-2020-28692 1 Gilacms 1 Gila Cms 2024-11-21 7.2 High
In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing PHP files.
CVE-2020-20696 1 Gilacms 1 Gila Cms 2024-11-21 5.4 Medium
A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field.
CVE-2020-20695 1 Gilacms 1 Gila Cms 2024-11-21 5.4 Medium
A stored cross-site scripting (XSS) vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file.
CVE-2020-20693 1 Gilacms 1 Gila Cms 2024-11-21 8.8 High
A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.
CVE-2020-20692 1 Gilacms 1 Gila Cms 2024-11-21 7.2 High
GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.
CVE-2020-20523 1 Gilacms 1 Gila Cms 2024-11-21 6.1 Medium
Cross Site Scripting (XSS) vulnerability in adm_user parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation.
CVE-2019-9647 1 Gilacms 1 Gila Cms 2024-11-21 N/A
Gila CMS 1.9.1 has XSS.
CVE-2019-20804 1 Gilacms 1 Gila Cms 2024-11-21 8.8 High
Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to compromise of the admin account.
CVE-2019-20803 1 Gilacms 1 Gila Cms 2024-11-21 6.1 Medium
Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for g_preview_theme.
CVE-2019-17536 1 Gilacms 1 Gila Cms 2024-11-21 4.9 Medium
Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/media_upload and fm/move.
CVE-2019-17535 1 Gilacms 1 Gila Cms 2024-11-21 6.1 Medium
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647.
CVE-2019-16679 1 Gilacms 1 Gila Cms 2024-11-21 4.9 Medium
Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion.