CVE-2012-3838

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-07-03 · updated 2026-06-16
Weakness: CWE-200

Description

Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/babygekko/index.php or (2) templates/html5demo/index.php.

Affected products

Babygekko Baby Gekko: through 1.1.5; 0.90, 0.91, 0.98-alpha, 0.99-beta, 1.0.0, 1.0.1 (+5)

References

http://www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html
http://www.exploit-db.com/exploits/18827
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php
http://www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html
http://www.exploit-db.com/exploits/18827
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php

Get alerted when CVE-2012-3838 or the next vulnerability affects your stack