Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2019-11515

Description

core/classes/db_backup.php in Gila CMS 1.10.1 allows admin/db_backup?download= absolute path traversal to read arbitrary files.

POC

Reference

- https://cisk123456.blogspot.com/2019/04/gila-cms-1101.html

Github

No PoCs found on GitHub currently.