GE
Vendor
Geeklog
32
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-46058 | GE Geeklog Geeklog | 4.8 | Oct 23 | Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the grp_desc parameter of the… |
| CVE-2023-46059 | GE Geeklog Geeklog | 4.8 | Oct 23 | Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the Service, and website URL… |
| CVE-2023-37787 | GE Geeklog Geeklog | 4.8 | Jul 13 | Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Rule and… |
| CVE-2023-37786 | GE Geeklog Geeklog | 4.8 | Jul 13 | Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Mail… |
| CVE-2013-1470 | GE Geeklog Geeklog | – | Feb 5 | Cross-site scripting (XSS) vulnerability in calendar/index.php in the Calendar plugin in Geeklog before 1.8.2sr1 and 2.0.0 before 2.0.0rc2 allows remote attackers to inject… |
| CVE-2011-5159 | GE Geeklog Geeklog | – | Sep 9 | Cross-site scripting (XSS) vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary web script or HTML via the sub_group… |
| CVE-2011-4942 | GE Geeklog Geeklog | – | Sep 9 | Multiple cross-site scripting (XSS) vulnerabilities in admin/configuration.php in Geeklog before 1.7.1sr1 allow remote attackers to inject arbitrary web script or HTML via the (1)… |
| CVE-2011-4647 | GE Geeklog Geeklog | – | Nov 30 | Multiple cross-site scripting (XSS) vulnerabilities in the story creation feature in Geeklog 1.8.0 allow remote attackers to inject arbitrary web script or HTML via the (1) code… |
| CVE-2010-4933 | GE Geeklog Geeklog | – | Oct 9 | SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the lid parameter |
| CVE-2009-3021 | GE Geeklog Geeklog | – | Aug 31 | Cross-site scripting (XSS) vulnerability in Site Calendar 'mycaljp' plugin 2.0.0 through 2.0.6, as used in the Japanese extended package of Geeklog 1.5.0 through 1.5.2 and when… |
| CVE-2007-2793 | GE Geeklog Geeklog | – | May 22 | PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbitrary PHP code via a URL in the glConf[path_system] parameter |
| CVE-2007-2706 | MG Media Gallery Geeklog | – | May 16 | PHP remote file inclusion vulnerability in maint/ftpmedia.php in Media Gallery 1.4.8a and earlier for Geeklog allows remote attackers to execute arbitrary PHP code via a URL in… |
| CVE-2007-0810 | GE Geeklog Geeklog | – | Feb 7 | PHP remote file inclusion vulnerability in MVCnPHP/BaseView.php in GeekLog 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the… |
| CVE-2006-6225 | GE Geeklog Geeklog | – | Dec 2 | Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a URL in the _CONF[path] parameter to (1)… |
| CVE-2006-3756 | GE Geeklog Geeklog | – | Jul 21 | Cross-site scripting (XSS) vulnerability in Geeklog 1.4.0sr4 and earlier, and 1.3.11sr6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified… |
| CVE-2006-3362 | GE Geeklog Geeklog | – | Jul 6 | Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka… |
| CVE-2006-2701 | GE Geeklog Geeklog | – | May 31 | SQL injection vulnerability in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to story submission |
| CVE-2006-2700 | GE Geeklog Geeklog | – | May 31 | SQL injection vulnerability in admin/auth.inc.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the… |
| CVE-2006-2699 | GE Geeklog Geeklog | – | May 31 | Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inject arbitrary HTML or web script via the image argument in a… |
| CVE-2006-2698 | GE Geeklog Geeklog | – | May 31 | Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request and possibly invalid arguments to (1)… |
| CVE-2006-1069 | GE Geeklog Geeklog | – | Mar 7 | Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers… |
| CVE-2006-0823 | GE Geeklog Geeklog | – | Feb 21 | Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the (1) userid… |
| CVE-2006-0824 | GE Geeklog Geeklog | – | Feb 21 | Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and… |
| CVE-2005-4725 | GE Geeklog Geeklog | – | Dec 31 | Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID |
| CVE-2005-4026 | GE Geeklog Geeklog | – | Dec 5 | search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive information via invalid (1) datestart and (2) dateend… |
| CVE-2005-2152 | GE Geeklog Geeklog | – | Jul 6 | SQL injection vulnerability in Geeklog before 1.3.11 allows remote attackers to execute arbitrary SQL commands via user comments for an article |
| CVE-2003-1347 | GE Geeklog Geeklog | – | Dec 31 | Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to comment.php, (2)… |
| CVE-2002-1917 | GE Geeklog Geeklog | – | Dec 31 | CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the… |
| CVE-2002-0963 | GE Geeklog Geeklog | – | Oct 4 | SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter |
| CVE-2002-0962 | GE Geeklog Geeklog | – | Oct 4 | Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar… |
| CVE-2002-0097 | GE Geeklog Geeklog | – | Mar 25 | Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account |
| CVE-2002-0096 | GE Geeklog Geeklog | – | Mar 25 | The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin… |