CVE-2020-28692

Name of the Vulnerable Software and Affected Versions Gila CMS version 1.16.0

Description The issue allows an attacker to upload a shell to the tmp directory and abuse .htaccess through the logs function for executing PHP files.

Recommendations For Gila CMS version 1.16.0, consider disabling the logs function as a temporary workaround until a patch is available. Restrict access to the tmp directory to minimize the risk of exploitation. Avoid using the logs function for executing PHP files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.