PT-2012-5034

Name of the Vulnerable Software and Affected Versions Gekko versions prior to 1.2.0 Description The issue allows remote attackers to obtain the installation path via a direct request to specific PHP files. This can be achieved by accessing the following API endpoints:...

CVE-2012-3838: Exposure of Sensitive Information to an Unauthorized Actor

Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to 1 admin/templates/babygekko/index.php or 2 templates/html5demo/index.php...