CVE-2012-6313 Information disclosure in n/a
Remote attackers can obtain sensitive installation path information via a stack trace when requesting the login page without a timezone.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-6313?
CVE-2012-6313 is a medium-severity vulnerability in n/a, published on 11 Dec 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain sensitive information via a request that lacks a timezone, leading to disclosure of the installation path in a stack trace.
Weakness: CWE-200
Which versions are affected by CVE-2012-6313?
It affects 2 products.
Products include Simple Gmail Login 1.1.2, Simple Gmail Login 1.1.3.
How do I fix CVE-2012-6313?
No fix has been published for CVE-2012-6313 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-6313 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2012-6313 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-c49p-mmwq-r586.