CVE-2020-28692

In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing PHP files

published November 16, 2020

CVSS
—
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing PHP files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01639 · 76.2th percentile
Published
2020-11-16T17:29Z
EPSS history
Timeline
  • 16 NOV 17:29Z
    In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing PHP files
    cvelistv5