Gila CMS Vulnerabilities and Affected Products
Explore source-attributed vulnerabilities associated with Gila CMS products.
Products
- Gila CMS1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-47900CRITICAL | Gila CMS < 2.0.0 - Remote Code ExecutionGila CMS versions prior to 2.0.0 contain a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands through manipulated HTTP headers. Attackers can inject PHP code in the User-Agent header with shell_exec() to run system commands by sending crafted requests to the admin endpoint. CWE-98Jan 27, 2026 | CVSS9.3v4.0 | EPSS0.602% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |