WordPress Plugin Simple Gmail Login – Stack Trace Information Disclosure

• Exploit Database
• 177 阅读

• 作者： Aditya Balapure
  日期： 2012-12-07
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/38111/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24

  source: https://www.securityfocus.com/bid/56860/info   The Simple Gmail Login plugin for WordPress is prone to an information-disclosure vulnerability.   Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.   Simple Gmail Login 1.1.3 and prior are vulnerable.   Fatal error: Uncaught exception &apos;Exception&apos; with message &apos;DateTimeZone::__construct() [<a href=&apos;https://www.exploit-db.com/exploits/38111/datetimezone.--construct&apos;>datetimezone.--construct</a>]: Unknown or bad timezone ()&apos; in C:\xampp\htdocs\wordpress\wp-content\plugins\simple-gmail-login\simple-gmail-login.php:229 Stack trace: #0 C:\xampp\htdocs\wordpress\wp-content\plugins\simple-gmail-login\simple-gmail-login.php(229): DateTimeZone->__construct(&apos;&apos;) #1 C:\xampp\htdocs\wordpress\wp-content\plugins\simple-gmail-login\simple-gmail-login.php(210): SimpleGmail_Plugin->log(&apos;Plugin activate...&apos;, false) #2 [internal function]: SimpleGmail_Plugin->activate(&apos;&apos;) #3 C:\xampp\htdocs\wordpress\wp-includes\plugin.php(403): call_user_func_array(Array, Array) #4 C:\xampp\htdocs\wordpress\wp-admin\plugins.php(157): do_action(&apos;activate_simple...&apos;) #5 {main} thrown in C:\xampp\htdocs\wordpress\wp-content\plugins\simple-gmail-login\simple-gmail-login.php on line 229