← All advisories

High severity7.2NVD Advisory· Published Sep 27, 2021· Updated Jun 17, 2026

CVE-2020-20692

CVE-2020-20692

Description

GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Gila/GilaCMS2 versions
cpe:2.3:a:gilacms:gila_cms:1.11.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gilacms:gila_cms:1.11.4:*:*:*:*:*:*:*
- (no CPE)range: =1.11.4
GilaCMS/GilaCMSdescription

Patches

Vulnerability mechanics

References

2

github.com/GilaCMS/gila/issues/50nvdExploitIssue TrackingThird Party Advisory
test.lingdong.store/2019/10/13/SQL-injection-in-Gila-CMS-version-1-11-4/nvdBroken Link

News mentions

0

No linked articles in our index yet.