PRIOn knowledge basePRION:CVE-2006-0824Code injection
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.147 Low
EPSS
Percentile
95.6%
Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and execute arbitrary code via (1) absolute paths in unspecified parameters and (2) the language cookie, as demonstrated for code execution using error.log.
| CPE | Name | Operator | Version |
|---|---|---|---|
| geeklog | eq | 1.3.11-sr3 | |
| geeklog | eq | 1.3.11-sr2 | |
| geeklog | eq | 1.4.0 | |
| geeklog | eq | 1.3.11-sr1 | |
| geeklog | eq | 1.3.11 |
Related
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.147 Low
EPSS
Percentile
95.6%