Export limit exceeded: 203863 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (22 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2020-26624 | 1 Gilacms | 1 Gila Cms | 2025-06-17 | 3.8 Low |
| A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the ID parameter after the login portal. | ||||
| CVE-2020-26623 | 1 Gilacms | 1 Gila Cms | 2025-06-03 | 3.8 Low |
| SQL Injection vulnerability discovered in Gila CMS 1.15.4 and earlier allows a remote attacker to execute arbitrary web scripts via the Area parameter under the Administration>Widget tab after the login portal. | ||||
| CVE-2020-26625 | 1 Gilacms | 1 Gila Cms | 2025-05-16 | 3.8 Low |
| A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the 'user_id' parameter after the login portal. | ||||
| CVE-2020-20726 | 1 Gilacms | 1 Gila Cms | 2024-12-11 | 8.8 High |
| Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the cm/update_rows/user parameter. | ||||
| CVE-2020-5515 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | 7.2 High |
| Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection. | ||||
| CVE-2020-5514 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | 9.1 Critical |
| Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI. | ||||
| CVE-2020-5513 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | 6.8 Medium |
| Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal. | ||||
| CVE-2020-5512 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | 6.8 Medium |
| Gila CMS 1.11.8 allows /admin/media?path=../ Path Traversal. | ||||
| CVE-2020-28692 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | 7.2 High |
| In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing PHP files. | ||||
| CVE-2020-20696 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | 5.4 Medium |
| A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field. | ||||
| CVE-2020-20695 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file. | ||||
| CVE-2020-20693 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | 8.8 High |
| A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts. | ||||
| CVE-2020-20692 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | 7.2 High |
| GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php. | ||||
| CVE-2020-20523 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | 6.1 Medium |
| Cross Site Scripting (XSS) vulnerability in adm_user parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation. | ||||
| CVE-2019-9647 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | N/A |
| Gila CMS 1.9.1 has XSS. | ||||
| CVE-2019-20804 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | 8.8 High |
| Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to compromise of the admin account. | ||||
| CVE-2019-20803 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | 6.1 Medium |
| Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for g_preview_theme. | ||||
| CVE-2019-17536 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | 4.9 Medium |
| Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/media_upload and fm/move. | ||||
| CVE-2019-17535 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | 6.1 Medium |
| Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647. | ||||
| CVE-2019-16679 | 1 Gilacms | 1 Gila Cms | 2024-11-21 | 4.9 Medium |
| Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion. | ||||