packetstormsecurity.com
http://packetstormsecurity.com/files/154578/Gila-CMS-Local-File-Inclusion.html CVE-2019-16679
MEDIUM
Gila CMS < 1.11.1 - Local File Inclusion
Record summary
CVE-2019-16679 has a selected CVSS score of 4.9 (medium); EIP currently links 1 catalogued exploit.
Description
Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBGila CMS < 1.11.1 - Local File InclusionExploitDB exploitby Sainadh JamalpurNot analyzed1 file
References
4github.com
https://github.com/GilaCMS/gila/issues/33 github.com
https://github.com/GilaCMS/gila/releases/tag/1.11.1 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2019-16679