Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2020-20975

Description

In \lib\admin\action\dataaction.class.php in Gxlcms v1.1, SQL Injection exists via the $filename parameter.

POC

Reference

- https://blog.csdn.net/qq_41770175/article/details/93486383

Github

No PoCs found on GitHub currently.