Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/media_upload and fm/move.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Gila CMS 代码问题漏洞
Vulnerability Description
Gila CMS是一套基于PHP和MySQL的开源内容管理系统（CMS）。 Gila CMS 1.11.4及之前版本中存在安全漏洞。攻击者可借助core/controllers/fm.php文件中的‘moveAction’函数利用该漏洞上传恶意文件，执行代码。
CVSS Information
N/A
Vulnerability Type
N/A