CVE-2005-2152

SQL injection vulnerability in Geeklog before 1.3.11 allows remote attackers to execute arbitrary SQL commands via user comments for an article.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:geeklog:geeklog:1.3.6:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.7:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.7_sr1:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.7_sr2:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.7_sr3:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.7_sr4:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.7_sr5:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.8:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.8_1:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr1:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr2:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr3:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr4:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr5:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr6:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.9_sr1:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.9_sr2:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.9_sr3:*:*:*:*:*:*:*
cpe:2.3:a:geeklog:geeklog:1.3.10:*:*:*:*:*:*:*

History

20 Nov 2024, 23:58

Type Values Removed Values Added
References () http://secunia.com/advisories/15914 - () http://secunia.com/advisories/15914 -
References () http://securitytracker.com/id?1014381 - () http://securitytracker.com/id?1014381 -
References () http://www.geeklog.net/article.php/geeklog-1.3.11sr1 - Patch, Vendor Advisory () http://www.geeklog.net/article.php/geeklog-1.3.11sr1 - Patch, Vendor Advisory
References () http://www.hardened-php.net/advisory-062005.php - Patch, Vendor Advisory () http://www.hardened-php.net/advisory-062005.php - Patch, Vendor Advisory

Information

Published : 2005-07-06 04:00

Updated : 2024-11-20 23:58


NVD link : CVE-2005-2152

Mitre link : CVE-2005-2152

CVE.ORG link : CVE-2005-2152


JSON object : View

Products Affected

geeklog

  • geeklog