GCVE - cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*

part: a version: 1.4.0 update: *

Vendor	Geeklog (`c0b5ca21-2ed4-5037-b10a-3e008df6a5af`)
Product	Geeklog (`aa44df9c-63ee-5d0c-a290-32d3e33d5bf4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/geeklog-core/geeklog`	purl2cpe	2026-06-01 10:13:45.025090
`pkg:sourceforge/geeklog`	purl2cpe	2026-06-01 10:13:45.025092

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-5159`	vulnerable	2026-06-08 04:59:34.915089	Details available Cross-site scripting (XSS) vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary web script or HTML via the sub_group parameter, a different vulnerability than CVE-2011-4942. Published: 2012-09-09T21:00:00.000Z Updated: 2024-09-17T03:18:56.275Z Open on db.gcve.eu Reference links http://www.geeklog.net/article.php/geeklog-1.7.1sr1 http://www.osvdb.org/70245 http://secunia.com/advisories/42775	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4942`	vulnerable	2026-06-08 04:59:33.968767	Details available Multiple cross-site scripting (XSS) vulnerabilities in admin/configuration.php in Geeklog before 1.7.1sr1 allow remote attackers to inject arbitrary web script or HTML via the (1) subgroup or (2) conf_group parameters. NOTE: this vulnerability might require a user-assisted attack or a bypass of a CSRF protection mechanism. Published: 2012-09-09T21:00:00.000Z Updated: 2024-09-16T16:23:55.693Z Open on db.gcve.eu Reference links http://www.geeklog.net/article.php/geeklog-1.7.1sr1 http://www.osvdb.org/70245 http://www.openwall.com/lists/oss-security/2011/03/18/8 http://www.openwall.com/lists/oss-security/2012/03/23/13 http://secunia.com/advisories/42775	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6225`	vulnerable	2026-06-08 04:49:22.316657	Details available Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a URL in the _CONF[path] parameter to (1) links/functions.inc, (2) polls/functions.inc, (3) spamx/BlackList.Examine.class.php, (4) spamx/DeleteComment.Action.class.php, (5) spamx/EditIPofURL.Admin.class.php, (6) spamx/MTBlackList.Examine.class.php, (7) spamx/MassDelete.Admin.class.php, (8) spamx/MailAdmin.Action.class.php, (9) spamx/MassDelTrackback.Admin.class.php, (10) spamx/EditHeader.Admin.class.php, (11) spamx/EditIP.Admin.class.php, (12) spamx/IPofUrl.Examine.class.php, (13) spamx/Import.Admin.class.php, (14) spamx/LogView.Admin.class.php, and (15) staticpages/functions.inc, in the plugins/ directory. Published: 2006-12-02T02:00:00.000Z Updated: 2024-08-07T20:19:35.087Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/27469 http://www.securityfocus.com/bid/18740 https://www.exploit-db.com/exploits/1963	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3756`	vulnerable	2026-06-08 04:49:10.156691	Details available Cross-site scripting (XSS) vulnerability in Geeklog 1.4.0sr4 and earlier, and 1.3.11sr6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when validating comments in (1) lib-comment.php (1.4.0sr4) or (2) comment.php (0.3.11sr6). Published: 2006-07-20T23:00:00.000Z Updated: 2024-08-07T18:39:54.040Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/2865 http://www.geeklog.net/article.php/geeklog-1.4.0sr5 http://secunia.com/advisories/21094 http://jvn.jp/jp/JVN%2381108784/index.html https://exchange.xforce.ibmcloud.com/vulnerabilities/27813	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3362`	vulnerable	2026-06-08 04:49:09.005742	Details available Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable and earlier, (3) WeBid 0.5.4, and possibly other products, when installed on Apache with mod_mime, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension and a trailing extension that is allowed, such as .zip. Published: 2006-07-06T20:00:00.000Z Updated: 2024-08-07T18:23:21.227Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19072 http://www.securityfocus.com/bid/18767 http://www.securityfocus.com/bid/30950 http://www.geeklog.net/article.php/geeklog-1.4.0sr4 https://exchange.xforce.ibmcloud.com/vulnerabilities/27469	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2701`	vulnerable	2026-06-08 04:49:07.378242	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2700`	vulnerable	2026-06-08 04:49:07.377110	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2699`	vulnerable	2026-06-08 04:49:07.371644	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2698`	vulnerable	2026-06-08 04:49:07.368715	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1069`	vulnerable	2026-06-08 04:48:56.184799	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0824`	vulnerable	2026-06-08 04:48:55.438967	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0823`	vulnerable	2026-06-08 04:48:55.438328	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.