CVE-2020-5515: SQL Injection

Published Jan 6, 2020

Updated

Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection.

Affected Software

1 affected component

GilaCMS Gila Cms=1.11.8

Event History

Jan 6, 2020

CVE Published

via MITRE·06:40 PM

Data Sourced

via MITRE·06:40 PM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2020-5515?

CVE-2020-5515 is a vulnerability in Gila CMS 1.11.8 that allows SQL Injection through the /admin/sql?query= parameter.

How severe is CVE-2020-5515?

CVE-2020-5515 has a severity rating of 7.2 (high).

What software versions are affected by CVE-2020-5515?

Gila CMS 1.11.8 is affected by CVE-2020-5515.

How can I fix CVE-2020-5515?

To fix CVE-2020-5515, it is recommended to update Gila CMS to a patched version or apply the necessary security patches provided by the vendor.

Is there any additional information about CVE-2020-5515?

Yes, you can find more information about CVE-2020-5515 through the provided references: [Reference 1](http://packetstormsecurity.com/files/158114/Gila-CMS-1.11.8-SQL-Injection.html), [Reference 2](http://packetstormsecurity.com/files/158140/Gila-CMS-1.1.18.1-SQL-Injection-Shell-Upload.html), [Reference 3](https://infosecdb.wordpress.com/2020/01/05/gilacms-1-11-8-admin-sqlquery-sql-injection/).