[KAPDA::#45] - geeklog multiple vulnerabilities

KAPDA New advisory Vendor: http://www.geeklog.net Bugs: Path Disclosure, XSS, SQL Injection Authentication bypass Vulnerable Version: geeklog-1.4.0sr2prior versions also may be affected Exploitation: Remote with browser Description: -------------------- geeklog is a freely available PHP-based web...

Geeklog < 1.4.0sr3 Multiple Injection Vulnerabilities

Binary data 3635.prm...

Geeklog 1.4 - Multiple Input Validation Vulnerabilities

Geeklog 1.4 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/18154/info Geeklog is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the applicati...

Geeklog 1.4 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/18154/info Geeklog is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A successfu...

Geeklog lib-sessions.php Session Cookie Handling Authentication Bypass

The version of Geeklog installed on the remote contains a flaw in its session-handling library that can be exploited by an attacker to bypass authentication and gain access as any user, including the admin. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Design/Logic Flaw

Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges as arbitrary users via unknown vectors...

CVE-2006-1069

Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges as arbitrary users via unknown vectors...

CVE-2006-1069

Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges as arbitrary users via unknown vectors...

CVE-2006-1069

CVE-2006-1069 affects Geeklog versions with a flaw in the session-handling library (lib-sessions.php) that can be exploited to bypass authentication and gain access as any user, including admin. Affected: Geeklog 1.4.x before 1.4.0sr2; 1.3.11 before 1.3.11sr5; 1.3.9 before 1.3.9sr5 (and possibly ...

Geeklog lib-sessions.php Session Cookie Handling Administrative Bypass

Binary data 3464.prm...

geeklog-1.3.11.txt

GulfTech Security Research February 19, 2006 Vendor : Geeklog URL : http://www.geeklog.net/ Version : All Versions Risk : Multiple Vulnerabilities Description: Geeklog is one of the most popular content management systems available today. Geeklog unfortunately is vulnerable to a number of differe...

Geeklog < 1.3.11sr4 / 1.4.0sr1 Multiple Remote Vulnerabilities (LFI, SQLi)

The installed version of Geeklog suffers from a number of SQL injection and local file flaws due to a failure of the application to sanitize user-supplied input. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid2095...

Code injection

Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and execute arbitrary code via 1 absolute paths in unspecified parameters and 2 the language cookie, as demonstrated for code...

CVE-2006-0823

Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the 1 userid variable to users.php or 2 sessid variable to lib-sessions.php...

CVE-2006-0824

Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and execute arbitrary code via 1 absolute paths in unspecified parameters and 2 the language cookie, as demonstrated for code...

Sql injection

Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the 1 userid variable to users.php or 2 sessid variable to lib-sessions.php...

CVE-2006-0823

Geeklog is affected in versions up to 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 due to SQL injection flaws in the handling of GPC data (notably via the userid cookie in users.php and sessid in lib-sessions.php). The vulnerabilities allow remote attackers to inject arbitrary SQL commands. ...

CVE-2006-0823

Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the 1 userid variable to users.php or 2 sessid variable to lib-sessions.php...

CVE-2006-0824

Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and execute arbitrary code via 1 absolute paths in unspecified parameters and 2 the language cookie, as demonstrated for code...

CVE-2006-0824

CVE-2006-0824 affects Geeklog: lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allows remote attackers to include arbitrary local files and execute code via absolute paths in unspecified parameters and via the language cookie (demonstrated for code execution using erro...