CVE-2012-6313

simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain sensitive information via a request that lacks a timezone, leading to disclosure of the installation path in a stack trace.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:simple_gmail_login:1.1.2:*:*:*:*:*:*:*:*
cpe:2.3:a:simple_gmail_login:1.1.3:*:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*

History

21 Nov 2024, 01:46

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/bugtraq/2012-12/0061.html - () http://archives.neohapsis.com/archives/bugtraq/2012-12/0061.html -
References () http://wordpress.org/extend/plugins/simple-gmail-login/changelog/ - () http://wordpress.org/extend/plugins/simple-gmail-login/changelog/ -

Information

Published : 2012-12-11 12:18

Updated : 2024-11-21 01:46


NVD link : CVE-2012-6313

Mitre link : CVE-2012-6313

CVE.ORG link : CVE-2012-6313


JSON object : View

Products Affected

simple_gmail_login

  • 1.1.2
  • 1.1.3

wordpress

  • wordpress
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor