CVE-2020-5513

Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal.

CVSS v3.1

6.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

CVSS v2.0

6.8 MEDIUMAV:N/AC:L/Au:S/C:C/I:N/A:N

EPSS

25.79% chance of exploitation in the next 30 days, 98th percentile

Published

2020-01-06

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://infosecdb.wordpress.com/2020/01/05/gilacms-1-11-8-cm-deletet-lfi-local-file-inclu…

References

• CVE Record
• NVD entry

Related

• CVE-2020-5511
• CVE-2020-5514
• CVE-2020-5510
• CVE-2020-5515
• CVE-2020-5509
• CVE-2020-5720