PT-2020-17031 · Gila · Gila Cms

Jkana · Published 2020-11-16 · Updated 2020-11-30 · CVE-2020-28692

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Gila CMS version 1.16.0

Description The issue allows an attacker to upload a shell to the tmp directory and abuse .htaccess through the logs function for executing PHP files.

Recommendations For Gila CMS version 1.16.0, consider disabling the logs function as a temporary workaround until a patch is available. Restrict access to the tmp directory to minimize the risk of exploitation. Avoid using the logs function for executing PHP files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-28692

Affected Products

Gila Cms

References · 5

• 🔥 https://github.com/jkana/Gila-CMS-1.16.0-shell-upload · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-28692 · Security Note
• https://osv.dev/vulnerability/CVE-2020-28692 · Vendor Advisory
• https://t.me/cibsecurity/16389 · Telegram Post
• https://t.me/cvenotify/6355 · Telegram Post