Information disclosure in Simple Gmail Login 1.1.2
CVE-2012-6313
simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain sensitive information via a request that lacks a timezone, leading to disclosure of the installation path in a stack trace.
Vulnerability class: Information Disclosure
EPSS: 0.072 (93.6th percentile) — read the EPSS interpretation.
Affected products
- Simple_gmail_login 1.1.2
- Simple_gmail_login 1.1.3
- Wordpress
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2012-6313?
- CVE-2012-6313 is a vulnerability in Simple Gmail Login 1.1.2, classified under Information Disclosure. Published 2012-12-11.
- Is CVE-2012-6313 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.