GCVE - cpe:2.3:a:geeklog:geeklog:1.3.9_sr4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:geeklog:geeklog:1.3.9_sr4:*:*:*:*:*:*:*

part: a version: 1.3.9_sr4 update: *

Vendor	Geeklog (`c0b5ca21-2ed4-5037-b10a-3e008df6a5af`)
Product	Geeklog (`aa44df9c-63ee-5d0c-a290-32d3e33d5bf4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/geeklog-core/geeklog`	purl2cpe	2026-06-01 10:13:45.025087
`pkg:sourceforge/geeklog`	purl2cpe	2026-06-01 10:13:45.025089

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-2701`	vulnerable	2026-06-08 04:49:07.378055	Details available SQL injection vulnerability in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to story submission. Published: 2006-05-31T10:00:00.000Z Updated: 2024-08-07T17:58:51.807Z Open on db.gcve.eu Reference links http://www.geeklog.net/index.php?topic=Security http://www.vupen.com/english/advisories/2006/2050 https://exchange.xforce.ibmcloud.com/vulnerabilities/26863 http://secunia.com/advisories/20316	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2700`	vulnerable	2026-06-08 04:49:07.376936	Details available SQL injection vulnerability in admin/auth.inc.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the loginname parameter. Published: 2006-05-31T10:00:00.000Z Updated: 2024-08-07T17:58:51.880Z Open on db.gcve.eu Reference links http://www.geeklog.net/index.php?topic=Security http://securityreason.com/securityalert/993 http://www.securityfocus.com/archive/1/435295/100/0/threaded http://www.vupen.com/english/advisories/2006/2050 https://exchange.xforce.ibmcloud.com/vulnerabilities/26863	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2699`	vulnerable	2026-06-08 04:49:07.371455	Details available Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inject arbitrary HTML or web script via the image argument in a show action. Published: 2006-05-31T10:00:00.000Z Updated: 2024-08-07T17:58:51.871Z Open on db.gcve.eu Reference links http://www.geeklog.net/index.php?topic=Security http://securityreason.com/securityalert/993 http://www.securityfocus.com/archive/1/435295/100/0/threaded http://www.vupen.com/english/advisories/2006/2050 https://exchange.xforce.ibmcloud.com/vulnerabilities/26862	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2698`	vulnerable	2026-06-08 04:49:07.363298	Details available Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request and possibly invalid arguments to (1) layout/professional/functions.php or (2) getimage.php. Published: 2006-05-31T10:00:00.000Z Updated: 2024-08-07T17:58:52.098Z Open on db.gcve.eu Reference links http://www.geeklog.net/index.php?topic=Security http://securityreason.com/securityalert/993 http://www.securityfocus.com/archive/1/435295/100/0/threaded http://www.vupen.com/english/advisories/2006/2050 http://kapda.ir/advisory-336.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1069`	vulnerable	2026-06-08 04:48:56.183549	Details available Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges as arbitrary users via unknown vectors. Published: 2006-03-07T23:00:00.000Z Updated: 2024-08-07T16:56:15.656Z Open on db.gcve.eu Reference links http://www.geeklog.net/article.php/geeklog-1.4.0sr2 http://www.securityfocus.com/bid/17010 http://www.vupen.com/english/advisories/2006/0851	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.