CVE-2021-47900 - Gila CMS < 2.0.0 - Remote Code Execution

CVE ID : CVE-2021-47900 Published : Jan. 27, 2026, 3:23 p.m. | 41 minutes ago Description : Gila CMS versions prior to 2.0.0 contain a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands through manipulated HTTP headers. Attackers can inject PHP code in the User-Agent header with shell_exec() to run system commands by sending crafted requests to the admin endpoint. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...