Security Advisory
CVE-2019-17536
4.9
MEDIUM
Vulnerability Description
Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/media_upload and fm/move.
Published Date
October 13, 2019
Official Source
NIST NVD Advisory