Lucene search
MitreCVE-2006-1069HistoryMar 07, 2006 - 11:02 p.m.
CVE-2006-1069
2006-03-0723:02:00
mitre
web.nvd.nist.gov
21
cve-2006-1069
session handling
geeklog
privilege escalation
nvd
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7
Confidence
Low
EPSS
0.004
Percentile
74.6%
Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges as arbitrary users via unknown vectors.
Affected configurations
Node
geekloggeeklogMatch1.3.9
ORgeekloggeeklogMatch1.3.9_sr1
ORgeekloggeeklogMatch1.3.9_sr2
ORgeekloggeeklogMatch1.3.9_sr3
ORgeekloggeeklogMatch1.3.9_sr4
ORgeekloggeeklogMatch1.3.11
ORgeekloggeeklogMatch1.3.11_sr1
ORgeekloggeeklogMatch1.3.11_sr2
ORgeekloggeeklogMatch1.3.11_sr3
ORgeekloggeeklogMatch1.3.11_sr4
ORgeekloggeeklogMatch1.4.0
ORgeekloggeeklogMatch1.4.0_sr1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| geeklog | geeklog | 1.3.9 | cpe:2.3:a:geeklog:geeklog:1.3.9:*:*:*:*:*:*:* |
| geeklog | geeklog | 1.3.9_sr1 | cpe:2.3:a:geeklog:geeklog:1.3.9_sr1:*:*:*:*:*:*:* |
| geeklog | geeklog | 1.3.9_sr2 | cpe:2.3:a:geeklog:geeklog:1.3.9_sr2:*:*:*:*:*:*:* |
| geeklog | geeklog | 1.3.9_sr3 | cpe:2.3:a:geeklog:geeklog:1.3.9_sr3:*:*:*:*:*:*:* |
| geeklog | geeklog | 1.3.9_sr4 | cpe:2.3:a:geeklog:geeklog:1.3.9_sr4:*:*:*:*:*:*:* |
| geeklog | geeklog | 1.3.11 | cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:* |
| geeklog | geeklog | 1.3.11_sr1 | cpe:2.3:a:geeklog:geeklog:1.3.11_sr1:*:*:*:*:*:*:* |
| geeklog | geeklog | 1.3.11_sr2 | cpe:2.3:a:geeklog:geeklog:1.3.11_sr2:*:*:*:*:*:*:* |
| geeklog | geeklog | 1.3.11_sr3 | cpe:2.3:a:geeklog:geeklog:1.3.11_sr3:*:*:*:*:*:*:* |
| geeklog | geeklog | 1.3.11_sr4 | cpe:2.3:a:geeklog:geeklog:1.3.11_sr4:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-1069
2006-03-07 23:00:00
nessus
nessus
Geeklog lib-sessions.php Session Cookie Handling Authentication Bypass
2006-03-09 00:00:00
prion
prion
Design/Logic Flaw
2006-03-07 23:02:00
nvd
nvd
CVE-2006-1069
2006-03-07 23:02:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7
Confidence
Low
EPSS
0.004
Percentile
74.6%
Related for CVE-2006-1069