Description
Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the content of several files present in the installation folder in the server's response.
Remediation
References
Related Vulnerabilities
Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.1)
WordPress Plugin Starfish Review Generation & Marketing for WordPress Security Bypass (2.0.0)
Oracle Application Server Other Vulnerability (CVE-2004-2134)
WordPress Plugin Social Share Icons & Social Share Buttons Security Bypass (3.0.2)
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-7233)