CVE-2020-26625

CVSS 3.1 Score 3.8 of 10 (low)

Details

Published Jan 2, 2024

Updated: Jan 9, 2024

CWE ID 89

Summary

CVE-2020-26625 is a SQL injection vulnerability that affects Gila CMS versions 1.15.4 and older. An attacker can exploit this vulnerability by injecting malicious SQL code through the 'user_id' parameter in the login portal, allowing them to execute arbitrary web scripts remotely. Successful exploitation could lead to unauthorized access, data theft, or website defacement. It is strongly recommended that affected organizations upgrade to the latest version of Gila CMS to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Gilacms Gila Cms

Affected Vendors

Gilacms

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/t5EH8Y
https://www.cve.org/CVERecord?id=CVE-2020-26625
https://nvd.nist.gov/vuln/detail/CVE-2020-26625

Back to Vulnerability Database