13 matches found
EUVD-2006-2697
Malware in sbrugna...
EUVD-2006-0830
Malware in sbrugna...
CVE-2023-37787
Multiple cross-site scripting XSS vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Rule and Route parameters of /admin/router.php...
CVE-2011-4942
Multiple cross-site scripting XSS vulnerabilities in admin/configuration.php in Geeklog before 1.7.1sr1 allow remote attackers to inject arbitrary web script or HTML via the 1 subgroup or 2 confgroup parameters. NOTE: this vulnerability might require a user-assisted attack or a bypass of a CSRF...
CVE-2011-4647
Multiple cross-site scripting XSS vulnerabilities in the story creation feature in Geeklog 1.8.0 allow remote attackers to inject arbitrary web script or HTML via the 1 code or 2 raw BBcode tags...
Geeklog 1.3.x - Cross-Site Scripting
Geeklog 1.3.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/8718/info Geeklog is prone to multiple vulnerabilities, including cross-site scripting and SQL injection issues. Exploitation of these issues could permit unauthorized access to user accounts and sensitive information...
Geeklog 1.3.x - SQL Injection
source: https://www.securityfocus.com/bid/8718/info Geeklog is prone to multiple vulnerabilities, including cross-site scripting and SQL injection issues. Exploitation of these issues could permit unauthorized access to user accounts and sensitive information. Some of these issues may be related ...
geeklog2.txt
Geeklog Multiple Versions Vulnerabilities ------ PRODUCT: Geeklog VENDOR: Geeklog VULNERABLE VERSIONS: - 2.x TESTED T.I.N.P - 1.x TESTED T.I.N.P - And older versions possible affected too. NO VULNERABLE VERSIONS - ? --------------------- N.TED = Not Tested in a Real Site / Production Site T.I.N.P...
Geeklog 1.3.7sr1 and below multiple vulnerabilities.
Products: Geeklog 1.3.7sr1 and below http://www.geeklog.net Date: 29 May 2003 Author: pokleyzz pokleyzzatscan-associates.net Contributors: skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: Geeklog 1.3.7sr1 and below...
Geeklog <= 1.3.7sr1 Multiple Vulnerabilities (SQLi, XSS, Priv Esc)
The remote server is running a version of Geeklog affected by various vulnerabilities, including SQL injection, arbitrary file upload, privilege escalation, etc. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Date: Thu, 29 May 2003 13:02:55 +0800 From: pokleyzz To: [email protected],...
CVE-2002-0962
Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via 1 the url variable in the Link field of a calendar event, 2 the topic parameter in index.php, or 3 the title parameter in comment.php...
Geeklog XSS and CRLF Injection
Geeklog XSS and CRLF Injection PROGRAM: Geeklog VENDOR: Tony Bibbs et al. [email protected] HOMEPAGE: http://geeklog.sourceforge.net/ VULNERABLE VERSIONS: 1.3.5sr1, possibly earlier versions as well NOT VULNERABLE VERSIONS: 1.3.5sr2 LOGIN REQUIRED: no SEVERITY: high DESCRIPTION:...
[ARL02-A13] Multiple Security Issues in GeekLog
+/---------------- ALPER Research Labs ------/--------/+ +/---------------- Security Advisory -----/---------/+ +/---------------- ID: ARL02-A13 ----/----------/+ +/---------------- [email protected] ---/-----------/+ Advisory Information -------------------- Name : Multiple Security Issues in...