CVE-2020-20692

GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2021-09-27

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Gila Cms (Gilacms)

References

• http://test.lingdong.store/2019/10/13/SQL-injection-in-Gila-CMS-version-1-11-4/
• https://github.com/GilaCMS/gila/issues/50