Geeklog@1.4.0 sr2 Security Vulnerabilities and Issues — Geeklog@1.4.0 sr2 CVE List

Lucene search

GeeklogGeeklog1.4.0 sr2

3 matches found

CVE•added 2006/12/02 2:28 a.m.•47 views

CVE-2006-6225

Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a URL in the _CONF[path] parameter to (1) links/functions.inc, (2) polls/functions.inc, (3) spamx/BlackList.Examine.class.php, (4) spamx/DeleteComment.Action.class.php, (5) spamx/E...

5.1CVSS7.8AI score0.12315EPSS

Web

CVE•added 2006/07/06 8:5 p.m.•46 views

CVE-2006-3362

Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable and earlier, (3) WeBid 0.5.4, and possibly other products, when installed on Apache with mod_mime, allows remote...

5.1CVSS7.6AI score0.13342EPSS

Web

CVE•added 2006/05/31 10:6 a.m.•39 views

CVE-2006-2699

Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inject arbitrary HTML or web script via the image argument in a show action.

6.8CVSS5.8AI score0.01395EPSS