Babygekko

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Babygekko records in CISA KEV

No Babygekko vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Baby Gekko 4 records LOW Babygekko 2 records MEDIUM

Records

6 records

TI-2012-04796 CVE-2012-5699 · GHSA-chff-pqgh-rg4m

BabyGekko before 1.2.4 allows PHP file inclusion.

MEDIUM 50

BabyGekko before 1.2.4 allows PHP file inclusion.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04937 Published 2020-01-23 No fix listed CWE-20

TI-2012-04795 CVE-2012-5698 · GHSA-3wr4-44h7-86g3

BabyGekko before 1.2.4 has SQL injection.

MEDIUM 42

BabyGekko before 1.2.4 has SQL injection.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01755 Published 2020-01-23 No fix listed CWE-89

TI-2012-03320 CVE-2012-3838 · GHSA-vfrc-j747-4j7p

Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct…

LOW 28

Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/babygekko/index.php or (2) templates/html5demo/index.php.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02788 Published 2012-07-03 No fix listed CWE-200

TI-2012-04797 CVE-2012-5700 · GHSA-r6qh-qvw2-fm2h

Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/index.php or the (2) username or (3) passwor…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01815 Published 2014-09-22 No fix listed CWE-79

TI-2012-03319 CVE-2012-3837 · GHSA-2223-xwpw-4pw3

Multiple cross-site scripting (XSS) vulnerabilities in…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) email_ad…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01614 Published 2012-07-03 No fix listed CWE-79

TI-2012-03318 CVE-2012-3836 · GHSA-9629-8q6w-ggcr

Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.0 allow…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) groupname parameter in a savecategory in the users module; (2) virt…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01614 Published 2012-07-03 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	4
Low	0
No CVSS	0