PT-2019-15194 · Gila · Gila Cms

Rastating · Published 2019-10-13 · Updated 2019-10-17 · CVE-2019-17536

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AC:L/AV:N/A:L/C:H/I:H/PR:L/S:C/UI:N

Name of the Vulnerable Software and Affected Versions Gila CMS versions prior to 1.11.5

Description The issue allows an attacker to upload a file with a dangerous type via the moveAction function in core/controllers/fm.php. This can be achieved by using the admin/media upload and fm/move endpoints.

Recommendations For versions prior to 1.11.5, update to version 1.11.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the moveAction function in core/controllers/fm.php to minimize the risk of exploitation. Avoid using the admin/media upload and fm/move endpoints until the issue is resolved.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2019-17536

Affected Products

Gila Cms

References · 4

• 🔥 https://github.com/GilaCMS/gila/pull/49 · Exploit
• 🔥 https://rastating.github.io/gila-cms-upload-filter-bypass-and-rce · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-17536 · Security Note
• https://osv.dev/vulnerability/CVE-2019-17536 · Vendor Advisory