Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2020-5514

Description

Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI.

POC

Reference

- https://infosecdb.wordpress.com/2020/01/05/gilacms-1-11-8-remote-code-execution/

Github

No PoCs found on GitHub currently.