Description
In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing PHP files.
Unscored
CVE-2020-28692
EUVD-2020-21090GHSA-xhcm-8344-w8gw
In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing PHP files.
Published Nov 16, 2020 · Updated Aug 4, 2024 · Assigned by mitre