GCVE - cpe:2.3:a:geeklog:geeklog:1.3.5_sr1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:geeklog:geeklog:1.3.5_sr1:*:*:*:*:*:*:*

part: a version: 1.3.5_sr1 update: *

Vendor	Geeklog (`c0b5ca21-2ed4-5037-b10a-3e008df6a5af`)
Product	Geeklog (`aa44df9c-63ee-5d0c-a290-32d3e33d5bf4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/geeklog-core/geeklog`	purl2cpe	2026-06-01 10:13:45.001188
`pkg:sourceforge/geeklog`	purl2cpe	2026-06-01 10:13:45.001190

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-2701`	vulnerable	2026-06-08 04:49:07.377677	Details available SQL injection vulnerability in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to story submission. Published: 2006-05-31T10:00:00.000Z Updated: 2024-08-07T17:58:51.807Z Open on db.gcve.eu Reference links http://www.geeklog.net/index.php?topic=Security http://www.vupen.com/english/advisories/2006/2050 https://exchange.xforce.ibmcloud.com/vulnerabilities/26863 http://secunia.com/advisories/20316	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2700`	vulnerable	2026-06-08 04:49:07.376554	Details available SQL injection vulnerability in admin/auth.inc.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the loginname parameter. Published: 2006-05-31T10:00:00.000Z Updated: 2024-08-07T17:58:51.880Z Open on db.gcve.eu Reference links http://www.geeklog.net/index.php?topic=Security http://securityreason.com/securityalert/993 http://www.securityfocus.com/archive/1/435295/100/0/threaded http://www.vupen.com/english/advisories/2006/2050 https://exchange.xforce.ibmcloud.com/vulnerabilities/26863	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2699`	vulnerable	2026-06-08 04:49:07.371060	Details available Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inject arbitrary HTML or web script via the image argument in a show action. Published: 2006-05-31T10:00:00.000Z Updated: 2024-08-07T17:58:51.871Z Open on db.gcve.eu Reference links http://www.geeklog.net/index.php?topic=Security http://securityreason.com/securityalert/993 http://www.securityfocus.com/archive/1/435295/100/0/threaded http://www.vupen.com/english/advisories/2006/2050 https://exchange.xforce.ibmcloud.com/vulnerabilities/26862	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2698`	vulnerable	2026-06-08 04:49:07.351331	Details available Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request and possibly invalid arguments to (1) layout/professional/functions.php or (2) getimage.php. Published: 2006-05-31T10:00:00.000Z Updated: 2024-08-07T17:58:52.098Z Open on db.gcve.eu Reference links http://www.geeklog.net/index.php?topic=Security http://securityreason.com/securityalert/993 http://www.securityfocus.com/archive/1/435295/100/0/threaded http://www.vupen.com/english/advisories/2006/2050 http://kapda.ir/advisory-336.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1917`	vulnerable	2026-06-08 04:47:18.491148	Details available CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the Subject field and adding a BCC mail header. Published: 2005-06-28T04:00:00.000Z Updated: 2024-09-16T16:42:42.114Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/9639.php http://www.securityfocus.com/bid/5271 http://online.securityfocus.com/archive/1/283140	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.