CVE-2020-26623: Gila CMS SQL Injection

January 3, 2024

SQL Injection vulnerability discovered in Gila CMS 1.15.4 and earlier allows a remote attacker to execute arbitrary web scripts via the Area parameter under the Administration>Widget tab after the login portal.

References

github.com/advisories/GHSA-rpjw-97p8-p2xp
nvd.nist.gov/vuln/detail/CVE-2020-26623
packetstormsecurity.com/files/176301/GilaCMS-1.15.4-SQL-Injection.html

Code Behaviors & Features

Detect and mitigate CVE-2020-26623 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →