Vulnerabilidades de Gila CMS
CVEs publicadas que afetam produtos de Gila CMS: 1 registro(s), com severidade, exploração e correções.
CVE-2021-47900
Crítica · 9.8
CWE-98 27/01/2026
Gila CMS < 2.0.0 - Remote Code Execution
Gila CMS versions prior to 2.0.0 contain a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands through manipulated HTTP headers. Attackers can inject PHP code in the User-Agent header with shell_exec() to run system commands by sending crafted requests to the admin endpoint.