CVE-2019-17536

MEDIUM 4.9CVE-2019-17536 · Published 13/10/2019 · updated 17/06/2026

In short

CVE-2019-17536 is a MEDIUM (CVSS 4.9) vulnerability affecting gila cms (gilacms).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 82.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gila cms gilacms	`≤ 1.11.4`	No fix yet

Description

Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/media_upload and fm/move.

References

GilaCMS/gila#49 · Exploit
rastating.github.io/gila-cms-upload-filter-bypass-and-rce · Exploit

More vulnerabilities in gila cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gila cms

gilacms

≤ 1.11.4

No fix yet

More vulnerabilities in gila cms

See all →