CVE-2003-1347

Multiple cross-site scripting XSS vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web script or HTML via the 1 cid parameter to comment.php, 2 uid parameter to profiles.php, 3 uid to users.php, and 4 homepage field...

Geeklog exploit

Following is an example of how MySQL SQL injections can be exploited, and also how suppressing error messages isn't sufficient as a solution, as proposed in some earlier postings. It was also included in Geeklog 1.3.8-1sr1 security update even though the developers noted it's not a complete...

Geeklog 1.3.8 - Forgot Password SQL Injection

Geeklog 1.3.8 - Forgot Password SQL Injection source: https://www.securityfocus.com/bid/8849/info An SQL injection vulnerability has been reported in the Geeklog "forgot password" feature introduced in Geeklog 1.3.8. Due to insufficient sanitization of user-supplied input, it is possible for remo...

Geeklog 1.3.8 - Forgot Password SQL Injection

source: https://www.securityfocus.com/bid/8849/info An SQL injection vulnerability has been reported in the Geeklog "forgot password" feature introduced in Geeklog 1.3.8. Due to insufficient sanitization of user-supplied input, it is possible for remote attacks to influence database queries. This...

GeekLog 1.3.x - HTML Injection

GeekLog 1.3.x - HTML Injection source: https://www.securityfocus.com/bid/8792/info Geeklog has been reported prone to multiple HTML Injection vulnerabilities. The issues have been reported to present themselves due to a lack of sufficient sanitization performed on data that is parsed from forum...

geeklog2.txt

Geeklog Multiple Versions Vulnerabilities ------ PRODUCT: Geeklog VENDOR: Geeklog VULNERABLE VERSIONS: - 2.x TESTED T.I.N.P - 1.x TESTED T.I.N.P - And older versions possible affected too. NO VULNERABLE VERSIONS - ? --------------------- N.TED = Not Tested in a Real Site / Production Site T.I.N.P...

Geeklog 1.3.x - Cross-Site Scripting

Geeklog 1.3.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/8718/info Geeklog is prone to multiple vulnerabilities, including cross-site scripting and SQL injection issues. Exploitation of these issues could permit unauthorized access to user accounts and sensitive information...

Geeklog 1.3.x - SQL Injection

Geeklog 1.3.x - SQL Injection source: https://www.securityfocus.com/bid/8718/info Geeklog is prone to multiple vulnerabilities, including cross-site scripting and SQL injection issues. Exploitation of these issues could permit unauthorized access to user accounts and sensitive information. Some o...

Geeklog 1.3.x - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8718/info Geeklog is prone to multiple vulnerabilities, including cross-site scripting and SQL injection issues. Exploitation of these issues could permit unauthorized access to user accounts and sensitive information. Some of these issues may be related ...

Geeklog 1.3.x - SQL Injection

source: https://www.securityfocus.com/bid/8718/info Geeklog is prone to multiple vulnerabilities, including cross-site scripting and SQL injection issues. Exploitation of these issues could permit unauthorized access to user accounts and sensitive information. Some of these issues may be related ...

Geeklog 1.3.7sr1 and below multiple vulnerabilities.

Products: Geeklog 1.3.7sr1 and below http://www.geeklog.net Date: 29 May 2003 Author: pokleyzz pokleyzzatscan-associates.net Contributors: skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: Geeklog 1.3.7sr1 and below...

geeklog.txt

Products: Geeklog 1.3.7sr1 and below http://www.geeklog.net Date: 29 May 2003 Author: pokleyzz Contributors: skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: Geeklog 1.3.7sr1 and below multiple vulnerabilities. Descripti...

Geeklog <= 1.3.7sr1 Multiple Vulnerabilities (SQLi, XSS, Priv Esc)

The remote server is running a version of Geeklog affected by various vulnerabilities, including SQL injection, arbitrary file upload, privilege escalation, etc. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Date: Thu, 29 May 2003 13:02:55 +0800 From: pokleyzz To: [email protected],...

Geeklog 1.3.7 - 'users.php?uid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/6602/info Geeklog is prone to a cross-site scripting vulnerability in the 'users.php' script. This issue is due to insufficient sanitization of input submitted in URI parameters. As a result, an attacker may create a malicious link to a site hosting...

Geeklog 1.3.7 - users.php?uid Cross-Site Scripting

Geeklog 1.3.7 - users.php?uid Cross-Site Scripting source: https://www.securityfocus.com/bid/6602/info Geeklog is prone to a cross-site scripting vulnerability in the 'users.php' script. This issue is due to insufficient sanitization of input submitted in URI parameters. As a result, an attacker...

Geeklog 1.3.7 - Homepage User HTML Injection

Geeklog 1.3.7 - Homepage User HTML Injection source: https://www.securityfocus.com/bid/6604/info Geeklog is prone to HTML injection attacks. The user account 'Homepage' field is not sufficiently sanitized of HTML and script code. As a result, a malicious user may inject malicious HTML and script...

Geeklog 1.3.7 - comment.php?cid Cross-Site Scripting

Geeklog 1.3.7 - comment.php?cid Cross-Site Scripting source: https://www.securityfocus.com/bid/6603/info Geeklog is prone to a cross-site scripting vulnerability in the 'comment.php' script. This issue is due to insufficient sanitization of input submitted in URI parameters. As a result, an...

Geeklog 1.3.7 - profiles.php Multiple Cross-Site Scripting Vulnerabilities

Geeklog 1.3.7 - profiles.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/6601/info The Geeklog 'profiles.php' script is prone to multiple cross-site scripting vulnerabilities. This issue is due to insufficient sanitization of input submitted in URI...

Geeklog 1.3.7 - 'comment.php?cid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/6603/info Geeklog is prone to a cross-site scripting vulnerability in the 'comment.php' script. This issue is due to insufficient sanitization of input submitted in URI parameters. As a result, an attacker may create a malicious link to a site hosting...

CVE-2002-1917

CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the Subject field and adding a BCC mail header...