PT-2020-17031
CVE-2020-28692
·
تاريخ النشر
2020-11-16
·
تاريخ التحديث
2020-11-30
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Gila CMS version 1.16.0
Description
The issue allows an attacker to upload a shell to the tmp directory and abuse .htaccess through the logs function for executing PHP files.
Recommendations
For Gila CMS version 1.16.0, consider disabling the logs function as a temporary workaround until a patch is available. Restrict access to the tmp directory to minimize the risk of exploitation. Avoid using the logs function for executing PHP files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾