PT-2012-6262 · Google · Simple Gmail Login

Publicado 2012-12-11 · Atualizado 2012-12-11 · CVE-2012-6313

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Simple Gmail Login plugin versions prior to 1.1.4

Description The issue allows remote attackers to obtain sensitive information via a request that lacks a timezone, leading to disclosure of the installation path in a stack trace.

Recommendations For versions prior to 1.1.4, update to version 1.1.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the simple-gmail-login.php file until the update is applied.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2012-6313

Produtos afetados

Simple Gmail Login

Referências · 4

• 🔥 https://exploit-db.com/exploits/38111 · Exploit
• http://wordpress.org/extend/plugins/simple-gmail-login/changelog · Nota
• http://archives.neohapsis.com/archives/bugtraq/2012-12/0061.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-6313 · Nota de Segurança