Geeklog 1.8.1 'index.php' SQL注入漏洞

Geeklog是免费开源的博客软件 Geeklog 'index.php'不正确过滤用户提交的输入，远程攻击者可以提交恶意SQL查询，更改原来的SQL逻辑，获得敏感信息或操作数据库，控制应用系统 0 Geeklog 1.8.1 厂商解决方案 目前没有详细解决方案提供： http://www.geeklog.net/ http://www.example.com/easyfile/index.php?folder=SQLI...

Geeklog 1.8.1 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/52725/info Geeklog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

Geeklog 1.8.1 - index.php SQL Injection

Geeklog 1.8.1 - index.php SQL Injection source: https://www.securityfocus.com/bid/52725/info Geeklog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Geeklog 1.8.1 SQL Injection

In The Name Of GOD ============================================================================== Geeklog SQL Injection Vulnerability ============================================================================== » Title : Geeklog SQL Injection Vulnerability » TestedON: Linux » Download:...

CVE-2011-4647

Multiple cross-site scripting XSS vulnerabilities in the story creation feature in Geeklog 1.8.0 allow remote attackers to inject arbitrary web script or HTML via the 1 code or 2 raw BBcode tags...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the story creation feature in Geeklog 1.8.0 allow remote attackers to inject arbitrary web script or HTML via the 1 code or 2 raw BBcode tags...

CVE-2011-4647

Multiple cross-site scripting XSS vulnerabilities in the story creation feature in Geeklog 1.8.0 allow remote attackers to inject arbitrary web script or HTML via the 1 code or 2 raw BBcode tags...

CVE-2011-4647

CVE-2011-4647 describes multiple cross-site scripting (XSS) vulnerabilities in the story creation feature of Geeklog 1.8.0 . An attacker can inject arbitrary script or HTML via the (1) code or (2) raw BBcode tags . The attached connected documents confirm the issue pertains to Geeklog 1.8.0 and d...

PT-2011-5014

Name of the Vulnerable Software and Affected Versions Geeklog version 1.8.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the story creation feature. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the code or raw BBcod...

CVE-2011-4647: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the story creation feature in Geeklog 1.8.0 allow remote attackers to inject arbitrary web script or HTML via the 1 code or 2 raw BBcode tags...

CVE-2010-4933

SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the lid parameter...

Sql injection

SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the lid parameter...

CVE-2010-4933

SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the lid parameter...

CVE-2010-4933

CVE-2010-4933: A SQL injection in Geeklog 1.3.8 affects filemgmt/singlefile.php via the lid parameter, allowing remote SQL execution. Affected software/version: Geeklog 1.3.8 (Geeklog core, filemgmt module). Root cause: improper handling of lid leading to arbitrary SQL execution. Impact per sourc...

CVE-2010-4933: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the lid parameter...

PT-2011-1868

Name of the Vulnerable Software and Affected Versions Geeklog version 1.3.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the lid parameter in the filemgmt/singlefile.php file. Recommendations For Geeklog version 1.3.8, avoid using the lid...

Geeklog 1.7.1 Cross Site Scripting

========================================================= Geeklog 1.7.1 alert/XSS/&subgroup='"--alert/XSS/ /Request 6. SOLUTION Upgrade to 1.7.1sr1 7. VENDOR Geeklog Development Team http://www.geeklog.net/ 8. CREDIT This vulnerability was discovered by Aung Khant, http://yehg.net, YGN Ethical...

Geeklog 1.7.1 <= Cross Site Scripting Vulnerability

========================================== Geeklog 1.7.1 = Cross Site Scripting Vulnerability ========================================== 1. OVERVIEW The Geeklog was vulnerable to Cross Site Scripting in its administration backend. 2. BACKGROUND Geeklog is a PHP/MySQL based application for managin...

GeekLog 1.7.0 (fckeditor) Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications ============================================================= GeekLog 1.7.0 fckeditor Arbitrary File Upload Vulnerability ============================================================= db 88 88 ,ad8888ba, d88b 88 88 d8"' "8b d8'8b 88 88 d8' d8'...

GeekLog 1.7.0 Shell Upload

db 88 88 ,ad8888ba, d88b 88 88 d8"' "8b d8'8b 88 88 d8' d8' 8b 88aaaaaaaa88 88 d8YaaaaY8b 88""""""""88 88 88888 d8""""""""8b 88 88 Y8, 88 d8' 8b 88 88 Y8a. .a88 d8' 8b 88 88 "Y88888P" Exploit Title: Geeklog Date: 18-10-2010 Author: Kubanezi AHG Software Link: http://www.geeklog.net/ Version: 1.7....