PT-2012-6262 · Google · Simple Gmail Login

Published 2012-12-11 · Updated 2012-12-11 · CVE-2012-6313

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Simple Gmail Login plugin versions prior to 1.1.4

Description The issue allows remote attackers to obtain sensitive information via a request that lacks a timezone, leading to disclosure of the installation path in a stack trace.

Recommendations For versions prior to 1.1.4, update to version 1.1.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the simple-gmail-login.php file until the update is applied.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2012-6313

Affected Products

Simple Gmail Login

References · 4

• 🔥 https://exploit-db.com/exploits/38111 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-6313 · Security Note
• http://wordpress.org/extend/plugins/simple-gmail-login/changelog · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-12/0061.html · Note