CVE-2019-16679

Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion.

Score

CVSS 3.1 4.9 Medium

Status

Modified - cve@mitre.org

Published

2019-09-21

Last modified

2024-08-05

Weaknesses

CWE-22

Affected products

• Gila Cms (Gilacms)

References

• http://packetstormsecurity.com/files/154578/Gila-CMS-Local-File-Inclusion.html
• https://github.com/GilaCMS/gila/issues/33
• https://github.com/GilaCMS/gila/releases/tag/1.11.1