GE
Product
Geeklog
31
CVEs
0
On KEV
4.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add Geeklog to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46058 | 4.8 | Oct 23 | Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the grp_desc parameter of the… Affected: 2.2.2 |
| CVE-2023-46059 | 4.8 | Oct 23 | Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the Service, and website URL… Affected: 2.2.2 |
| CVE-2023-37787 | 4.8 | Jul 13 | Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Rule and… Affected: 2.2.2 |
| CVE-2023-37786 | 4.8 | Jul 13 | Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Mail… Affected: 2.2.2 |
| CVE-2013-1470 | – | Feb 5 | Cross-site scripting (XSS) vulnerability in calendar/index.php in the Calendar plugin in Geeklog before 1.8.2sr1 and 2.0.0 before 2.0.0rc2 allows remote attackers to inject… Affected: 1.8.2; 2.0.0; 2.0.0 |
| CVE-2011-5159 | – | Sep 9 | Cross-site scripting (XSS) vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary web script or HTML via the sub_group… Affected: through 1.7.1; 1.3; 1.3.5; 1.3.6; 1.3.7; 1.3.8; +8 more |
| CVE-2011-4942 | – | Sep 9 | Multiple cross-site scripting (XSS) vulnerabilities in admin/configuration.php in Geeklog before 1.7.1sr1 allow remote attackers to inject arbitrary web script or HTML via the (1)… Affected: through 1.7.1; 1.3; 1.3.5; 1.3.6; 1.3.7; 1.3.8; +8 more |
| CVE-2011-4647 | – | Nov 30 | Multiple cross-site scripting (XSS) vulnerabilities in the story creation feature in Geeklog 1.8.0 allow remote attackers to inject arbitrary web script or HTML via the (1) code… Affected: 1.8.0 |
| CVE-2010-4933 | – | Oct 9 | SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the lid parameter Affected: 1.3.8 |
| CVE-2009-3021 | – | Aug 31 | Cross-site scripting (XSS) vulnerability in Site Calendar 'mycaljp' plugin 2.0.0 through 2.0.6, as used in the Japanese extended package of Geeklog 1.5.0 through 1.5.2 and when… Affected: 1.5.0; 1.5.1; 1.5.2 |
| CVE-2007-2793 | – | May 22 | PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbitrary PHP code via a URL in the glConf[path_system] parameter Affected: 2.x |
| CVE-2007-0810 | – | Feb 7 | PHP remote file inclusion vulnerability in MVCnPHP/BaseView.php in GeekLog 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the… Affected: 2 |
| CVE-2006-6225 | – | Dec 2 | Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a URL in the _CONF[path] parameter to (1)… Affected: 1.4.0; 1.4.0_beta1; 1.4.0_sr1; 1.4.0_sr2; 1.4.0_sr3; 1.4.0_sr4 |
| CVE-2006-3756 | – | Jul 21 | Cross-site scripting (XSS) vulnerability in Geeklog 1.4.0sr4 and earlier, and 1.3.11sr6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified… Affected: 1.3.11; 1.3.11; 1.3.11; 1.3.11; 1.3.11; 1.3.11; +6 more |
| CVE-2006-3362 | – | Jul 6 | Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka… Affected: 1.4.0; 1.4.0_sr1; 1.4.0_sr2; 1.4.0_sr3 |
| CVE-2006-2701 | – | May 31 | SQL injection vulnerability in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to story submission Affected: through 1.4.0_sr2; 1.3; 1.3.5; 1.3.5_sr1; 1.3.6; 1.3.7; +34 more |
| CVE-2006-2698 | – | May 31 | Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request and possibly invalid arguments to (1)… Affected: through 1.4.0_sr2; 1.3; 1.3.5; 1.3.5_sr1; 1.3.6; 1.3.7; +34 more |
| CVE-2006-2699 | – | May 31 | Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inject arbitrary HTML or web script via the image argument in a… Affected: 1.3; 1.3.5; 1.3.5_sr1; 1.3.6; 1.3.7; 1.3.7_sr1; +34 more |
| CVE-2006-2700 | – | May 31 | SQL injection vulnerability in admin/auth.inc.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the… Affected: through 1.4.0_sr2; 1.3; 1.3.5; 1.3.5_sr1; 1.3.6; 1.3.7; +34 more |
| CVE-2006-1069 | – | Mar 7 | Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers… Affected: 1.3.9; 1.3.9_sr1; 1.3.9_sr2; 1.3.9_sr3; 1.3.9_sr4; 1.3.11; +6 more |
| CVE-2006-0824 | – | Feb 21 | Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and… Affected: 1.3.11; 1.3.11_sr1; 1.3.11_sr2; 1.3.11_sr3; 1.4.0 |
| CVE-2006-0823 | – | Feb 21 | Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the (1) userid… Affected: 1.3.11; 1.3.11_sr1; 1.3.11_sr2; 1.3.11_sr3; 1.4.0 |
| CVE-2005-4725 | – | Dec 31 | Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID Affected: 1.3.8_1_sr3; 1.3.8_1_sr4; 1.3.9; 1.3.9_rc1; 1.3.9_rc2; 1.3.9_rc3; +10 more |
| CVE-2005-4026 | – | Dec 5 | search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive information via invalid (1) datestart and (2) dateend… Affected: 1.3.0 through 1.3.11; 1.3.11; 1.3.11; 1.3.11; 1.4.0 |
| CVE-2005-2152 | – | Jul 6 | SQL injection vulnerability in Geeklog before 1.3.11 allows remote attackers to execute arbitrary SQL commands via user comments for an article Affected: 1.3.6; 1.3.7; 1.3.7_sr1; 1.3.7_sr2; 1.3.7_sr3; 1.3.7_sr4; +13 more |
| CVE-2003-1347 | – | Dec 31 | Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to comment.php, (2)… Affected: 1.3.7 |
| CVE-2002-1917 | – | Dec 31 | CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the… Affected: 1.3.5_sr1; 1.35 |
| CVE-2002-0963 | – | Oct 4 | SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter Affected: through 1.3.5 |
| CVE-2002-0962 | – | Oct 4 | Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar… Affected: through 1.3.5 |
| CVE-2002-0097 | – | Mar 25 | Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account Affected: 1.3 |
| CVE-2002-0096 | – | Mar 25 | The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin… Affected: 1.3 |
Showing 31