Skip to content
OpenAdvisories

Vendor

Gila CMS

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.8

    Gila CMS < 2.0.0 - Remote Code Execution

    Gila CMS versions prior to 2.0.0 contain a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands through manipulated HTTP headers. Attackers can inject PHP code in the User-Agent header with shell_exec(…