CVE-2012-3838

Summary

Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/babygekko/index.php or (2) templates/html5demo/index.php.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php
• http://www.exploit-db.com/exploits/18827
• http://www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html

References

• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php
• http://www.exploit-db.com/exploits/18827
• http://www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html

• ←Previous
• Next→