Vendor
Gila CMS
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.8
Gila CMS < 2.0.0 - Remote Code Execution
Gila CMS versions prior to 2.0.0 contain a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands through manipulated HTTP headers. Attackers can inject PHP code in the User-Agent header with shell_exec(…