Known Vulnerabilities for Gila Cms by Gilacms
Listed below are 10 of the newest known vulnerabilities associated with "Gila Cms" by "Gilacms".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-39486 json | A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords... | 5.4 - MEDIUM | 2021-10-04 | 2021-10-12 |
| CVE-2021-37777 json | Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visible by... | 7.5 - HIGH | 2021-10-04 | 2022-05-03 |
| CVE-2020-28692 json | In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing... | 7.2 - HIGH | 2020-11-16 | 2020-11-30 |
| CVE-2020-26625 json | A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitra... | 7.2 - HIGH | 2024-01-02 | 2026-07-05 |
| CVE-2020-26624 json | A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitra... | 7.2 - HIGH | 2024-01-02 | 2026-07-05 |
| CVE-2020-26623 json | SQL Injection vulnerability discovered in Gila CMS 1.15.4 and earlier allows a remote attacker to execute arbitrary web scrip... | 7.2 - HIGH | 2024-01-02 | 2026-07-05 |
| CVE-2020-20726 json | Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the ... | 8.8 - HIGH | 2023-06-20 | 2023-06-27 |
| CVE-2020-20696 json | A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary we... | 5.4 - MEDIUM | 2021-09-27 | 2021-10-01 |
| CVE-2020-20695 json | A stored cross-site scripting (XSS) vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTM... | 5.4 - MEDIUM | 2021-09-27 | 2021-10-01 |
| CVE-2020-20693 json | A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accoun... | 8.8 - HIGH | 2021-09-27 | 2021-10-01 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Gilacms | Gila Cms | 1.9.5 | |||
| Application | Gilacms | Gila Cms | 1.9.4 | |||
| Application | Gilacms | Gila Cms | 1.9.1 | |||
| Application | Gilacms | Gila Cms | 1.9.0 | |||
| Application | Gilacms | Gila Cms | 1.8.3 | |||
| Application | Gilacms | Gila Cms | 1.8.2 | |||
| Application | Gilacms | Gila Cms | 1.8.1 | |||
| Application | Gilacms | Gila Cms | 1.8.0 | |||
| Application | Gilacms | Gila Cms | 1.7.6 | |||
| Application | Gilacms | Gila Cms | 1.7.3 | |||
| Application | Gilacms | Gila Cms | 1.7.2 | |||
| Application | Gilacms | Gila Cms | 1.7.1 | |||
| Application | Gilacms | Gila Cms | 1.7.0 | |||
| Application | Gilacms | Gila Cms | 1.6.0 | |||
| Application | Gilacms | Gila Cms | 1.5.0 | |||
| Application | Gilacms | Gila Cms | 1.4.3 | |||
| Application | Gilacms | Gila Cms | 1.4.2 | |||
| Application | Gilacms | Gila Cms | 1.4.0 | |||
| Application | Gilacms | Gila Cms | 1.3.1 | |||
| Application | Gilacms | Gila Cms | 1.3.0 |