2020-01-05

2020-01-06

2020-01-07

All (3) Critical (2) High (8) Medium (3)

CVE-2020-5513 MEDIUM POC THREAT This Month

Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Gila Cms

NVD

CVSS 3.1

6.8

EPSS

25.8%

CVE-2020-5512 MEDIUM POC THREAT This Month

Gila CMS 1.11.8 allows /admin/media?path=../ Path Traversal. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Gila Cms

NVD

CVSS 3.1

6.8

EPSS

18.9%

CVE-2020-5191 MEDIUM POC This Month

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS PHP Hospital Management System

NVD Exploit-DB

CVSS 3.1

6.1

EPSS

5.5%