CVE-2012-3838: Babygekko Baby Gekko

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/babygekko/index.php or (2) templates/html5demo/index.php.

Affected products

• Babygekko Baby Gekko: up to and including 1.1.5; version 0.90 only; version 0.91 only; version 0.98 only; version 0.99 only; version 1.0.0 only; …

Published 2012-07-03. Last modified 2026-06-16.