What’s Vulnerable › Vulnerabilities
CVE-2020-5515
- Severity: high (CVSS 7.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 26.5% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2020-01-06 · updated 2026-06-17
- Weakness: CWE-89
Description
Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection.
Affected products
- Gila CMS: 1.11.8
References
- http://packetstormsecurity.com/files/158114/Gila-CMS-1.11.8-SQL-Injection.html
- http://packetstormsecurity.com/files/158140/Gila-CMS-1.1.18.1-SQL-Injection-Shell-Upload.html
- https://infosecdb.wordpress.com/2020/01/05/gilacms-1-11-8-admin-sqlquery-sql-injection/
- http://packetstormsecurity.com/files/158114/Gila-CMS-1.11.8-SQL-Injection.html
- http://packetstormsecurity.com/files/158140/Gila-CMS-1.1.18.1-SQL-Injection-Shell-Upload.html
- https://infosecdb.wordpress.com/2020/01/05/gilacms-1-11-8-admin-sqlquery-sql-injection/
Get alerted when CVE-2020-5515 or the next vulnerability affects your stack