Lucene search

[email protected]CVE-2012-3838

HistoryJul 03, 2012 - 10:55 p.m.

CVE-2012-3838

2012-07-0322:55:00

CWE-200

[email protected]

web.nvd.nist.gov

gekko

cve-2012-3838

security vulnerability

remote attackers

installation path

nvd

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

73.7%

JSON

Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/babygekko/index.php or (2) templates/html5demo/index.php.

CPENameOperatorVersion
babygekko:baby_gekkobabygekko baby gekkoeq1.0.1
babygekko:baby_gekkobabygekko baby gekkoeq0.90
babygekko:baby_gekkobabygekko baby gekkoeq1.0.0
babygekko:baby_gekkobabygekko baby gekkoeq1.1.1
babygekko:baby_gekkobabygekko baby gekkole1.1.5
babygekko:baby_gekkobabygekko baby gekkoeq0.99
babygekko:baby_gekkobabygekko baby gekkoeq1.1.2
babygekko:baby_gekkobabygekko baby gekkoeq1.1.4
babygekko:baby_gekkobabygekko baby gekkoeq1.1.3
babygekko:baby_gekkobabygekko baby gekkoeq1.1.0

CPE	Name	Operator	Version
babygekko:baby_gekko	babygekko baby gekko	eq	1.0.1
babygekko:baby_gekko	babygekko baby gekko	eq	0.90
babygekko:baby_gekko	babygekko baby gekko	eq	1.0.0
babygekko:baby_gekko	babygekko baby gekko	eq	1.1.1
babygekko:baby_gekko	babygekko baby gekko	le	1.1.5
babygekko:baby_gekko	babygekko baby gekko	eq	0.99
babygekko:baby_gekko	babygekko baby gekko	eq	1.1.2
babygekko:baby_gekko	babygekko baby gekko	eq	1.1.4
babygekko:baby_gekko	babygekko baby gekko	eq	1.1.3
babygekko:baby_gekko	babygekko baby gekko	eq	1.1.0

Rows per page:

1-10 of 121

References

www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html

www.exploit-db.com/exploits/18827

www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

73.7%

JSON

Related for CVE-2012-3838

prion1