Lucene search

[email protected]CVE-2005-2152

HistoryJul 06, 2005 - 4:00 a.m.

CVE-2005-2152

2005-07-0604:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

sql injection

geeklog

vulnerability

remote attackers

nvd

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.3%

JSON

SQL injection vulnerability in Geeklog before 1.3.11 allows remote attackers to execute arbitrary SQL commands via user comments for an article.

CPENameOperatorVersion
geeklog:geekloggeeklogeq1.3.8
geeklog:geekloggeeklogeq1.3.9_sr2
geeklog:geekloggeeklogeq1.3.6
geeklog:geekloggeeklogeq1.3.7_sr2
geeklog:geekloggeeklogeq1.3.7_sr5
geeklog:geekloggeeklogeq1.3.8_1_sr5
geeklog:geekloggeeklogeq1.3.7
geeklog:geekloggeeklogeq1.3.10
geeklog:geekloggeeklogeq1.3.8_1_sr2
geeklog:geekloggeeklogeq1.3.8_1_sr6

CPE	Name	Operator	Version
geeklog:geeklog	geeklog	eq	1.3.8
geeklog:geeklog	geeklog	eq	1.3.9_sr2
geeklog:geeklog	geeklog	eq	1.3.6
geeklog:geeklog	geeklog	eq	1.3.7_sr2
geeklog:geeklog	geeklog	eq	1.3.7_sr5
geeklog:geeklog	geeklog	eq	1.3.8_1_sr5
geeklog:geeklog	geeklog	eq	1.3.7
geeklog:geeklog	geeklog	eq	1.3.10
geeklog:geeklog	geeklog	eq	1.3.8_1_sr2
geeklog:geeklog	geeklog	eq	1.3.8_1_sr6

Rows per page:

1-10 of 191

References

secunia.com/advisories/15914

securitytracker.com/id?1014381

www.geeklog.net/article.php/geeklog-1.3.11sr1

www.hardened-php.net/advisory-062005.php

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.3%

JSON

Related for CVE-2005-2152

nessus1