Lucene search
HistoryMar 25, 2002 - 5:00 a.m.
CVE-2002-0097
geeklog 1.3
uid
remote attack
account hijacking
administrator account
cookie modification
6.9 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
80.9%
Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user’s permanent cookie to the target account.
| CPE | Name | Operator | Version |
|---|---|---|---|
| geeklog:geeklog | geeklog | eq | 1.3 |
Related
nessus
nessus
Geeklog <= 1.3.7sr1 Multiple Vulnerabilities (SQLi, XSS, Priv Esc)
2003-05-29 00:00:00
6.9 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
80.9%
Related for CVE-2002-0097