GCVE - cpe:2.3:a:geeklog:geeklog:1.3.9_rc2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:geeklog:geeklog:1.3.9_rc2:*:*:*:*:*:*:*

part: a version: 1.3.9_rc2 update: *

Vendor	Geeklog (`c0b5ca21-2ed4-5037-b10a-3e008df6a5af`)
Product	Geeklog (`aa44df9c-63ee-5d0c-a290-32d3e33d5bf4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/geeklog-core/geeklog`	purl2cpe	2026-06-01 10:13:45.019098
`pkg:sourceforge/geeklog`	purl2cpe	2026-06-01 10:13:45.019100

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-2701`	vulnerable	2026-06-08 04:49:07.377969	Details available SQL injection vulnerability in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to story submission. Published: 2006-05-31T10:00:00.000Z Updated: 2024-08-07T17:58:51.807Z Open on db.gcve.eu Reference links http://www.geeklog.net/index.php?topic=Security http://www.vupen.com/english/advisories/2006/2050 https://exchange.xforce.ibmcloud.com/vulnerabilities/26863 http://secunia.com/advisories/20316	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2700`	vulnerable	2026-06-08 04:49:07.376856	Details available SQL injection vulnerability in admin/auth.inc.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the loginname parameter. Published: 2006-05-31T10:00:00.000Z Updated: 2024-08-07T17:58:51.880Z Open on db.gcve.eu Reference links http://www.geeklog.net/index.php?topic=Security http://securityreason.com/securityalert/993 http://www.securityfocus.com/archive/1/435295/100/0/threaded http://www.vupen.com/english/advisories/2006/2050 https://exchange.xforce.ibmcloud.com/vulnerabilities/26863	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2699`	vulnerable	2026-06-08 04:49:07.371373	Details available Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inject arbitrary HTML or web script via the image argument in a show action. Published: 2006-05-31T10:00:00.000Z Updated: 2024-08-07T17:58:51.871Z Open on db.gcve.eu Reference links http://www.geeklog.net/index.php?topic=Security http://securityreason.com/securityalert/993 http://www.securityfocus.com/archive/1/435295/100/0/threaded http://www.vupen.com/english/advisories/2006/2050 https://exchange.xforce.ibmcloud.com/vulnerabilities/26862	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2698`	vulnerable	2026-06-08 04:49:07.360861	Details available Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request and possibly invalid arguments to (1) layout/professional/functions.php or (2) getimage.php. Published: 2006-05-31T10:00:00.000Z Updated: 2024-08-07T17:58:52.098Z Open on db.gcve.eu Reference links http://www.geeklog.net/index.php?topic=Security http://securityreason.com/securityalert/993 http://www.securityfocus.com/archive/1/435295/100/0/threaded http://www.vupen.com/english/advisories/2006/2050 http://kapda.ir/advisory-336.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4725`	vulnerable	2026-06-08 04:48:44.867306	Details available Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID. Published: 2006-02-20T20:00:00.000Z Updated: 2024-09-16T19:10:43.330Z Open on db.gcve.eu Reference links http://www.geeklog.net/article.php/geeklog-1.3.11sr3 http://www.geeklog.net/forum/viewtopic.php?showtopic=61457	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.