Summary
Detail | |||
---|---|---|---|
Vendor | Babygekko | First view | 2014-09-22 |
Product | Baby Gekko | Last view | 2014-09-22 |
Version | 1.2.2 | Type | Application |
Update | a | ||
Edition | * | ||
Language | * | ||
Sofware Edition | * | ||
Target Software | * | ||
Target Hardware | * | ||
Other | * | ||
CPE Product | cpe:2.3:a:babygekko:baby_gekko |
Activity : Overall
Related : CVE
Date | Alert | Description | |
---|---|---|---|
4.3 | 2014-09-22 | CVE-2012-5700 | Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/index.php or the (2) username or (3) password parameter in blocks/loginbox/loginbox.template.php to index.php. NOTE: some of these details are obtained from third party information. |
CWE : Common Weakness Enumeration
% | id | Name |
---|---|---|
100% (1) | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') |
ExploitDB Exploits
id | Description |
---|---|
22741 | BabyGekko 1.2.2e Multiple Vulnerabilities |