RETIRED: Gekko CMS Local File Disclosure Vulnerability
BID:53694
Info
RETIRED: Gekko CMS Local File Disclosure Vulnerability
| Bugtraq ID: | 53694 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 25 2012 12:00AM |
| Updated: | Jun 17 2012 12:01AM |
| Credit: | L3b-r1'z |
| Vulnerable: |
Baby Gekko Gekko CMS 0 |
| Not Vulnerable: | |
Discussion
RETIRED: Gekko CMS Local File Disclosure Vulnerability
Gekko CMS Framework is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input.
Exploiting this vulnerability could allow an attacker to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further attacks.
This BID is being retired. The issue can not be exploited as described.
Gekko CMS Framework is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input.
Exploiting this vulnerability could allow an attacker to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further attacks.
This BID is being retired. The issue can not be exploited as described.
Exploit / POC
RETIRED: Gekko CMS Local File Disclosure Vulnerability
Attackers can use a browser to exploit this issue.
The following exploit is available:
Attackers can use a browser to exploit this issue.
The following exploit is available:
Solution / Fix
RETIRED: Gekko CMS Local File Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].