Gila CMS SQL Injection

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-26623 · ADVISORY
• GilaCMS/gila · PACKAGE
• GilaCMS/gila · WEB
• packetstormsecurity.com/files/176301/GilaCMS-1.15.4-SQL-Injection.html · WEB
• gilacms.com · WEB

gilacms/gila のその他の脆弱性

• CVE-2020-26625低 3.8A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts …
• CVE-2020-26624低 3.8A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts …
• CVE-2020-20523中 6.1Cross Site Scripting (XSS) vulnerability in adm_user parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code…
• CVE-2020-20726高 8.8Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the cm/update_rows/…
• CVE-2020-20696中 5.4A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HT…