CVE-2007-6361

NONE

Gekko 0.8.2 and earlier stores sensitive information under the web root with possibly insufficient access control, which might allow remote attackers to read certain files under temp/, as demonstrated

发布于: 12/15/2007更新于: 4/9/2025
在NVD查看在MITRE查看

描述

Gekko 0.8.2 and earlier stores sensitive information under the web root with possibly insufficient access control, which might allow remote attackers to read certain files under temp/, as demonstrated by a log file that records the titles of blog entries. NOTE: access to temp/ is blocked by .htaccess in most deployments that use Apache HTTP Server.

AI分析AI驱动

受影响产品

gekkowaregekko

参考资料