Description
Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/media_upload and fm/move.
Critical · 9.9
CVE-2019-17536
EUVD-2019-7886GHSA-43m6-mm77-vrc8
Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. …
Published Oct 13, 2019 · Updated Aug 5, 2024 · Assigned by mitre