Gekko prior to 1.2.0 allows remote malicious users to obtain the installation path via a direct request to (1) admin/templates/babygekko/index.php or (2) templates/html5demo/index.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
babygekko baby gekko 1.0.0 |
||
babygekko baby gekko 0.99 |
||
babygekko baby gekko 0.98 |
||
babygekko baby gekko 0.91 |
||
babygekko baby gekko 1.1.1 |
||
babygekko baby gekko 1.0.1 |
||
babygekko baby gekko 0.90 |
||
babygekko baby gekko 1.1.4 |
||
babygekko baby gekko 1.1.3 |
||
babygekko baby gekko 1.1.2 |
||
babygekko baby gekko 1.1.0 |
||
babygekko baby gekko |