İçeriğe atla
Noroxi

geeklog kayıtları

geeklog üreticisine ait 32 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
11
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

32 kayıt
  • CVE-2007-2793
    49Planlayın

    PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbitrary PHP code via a U

    YüksekCVSS 7,5Kavram kanıtıEPSS %64

    geeklog · geeklog21 May 2007

  • CVE-2006-1069
    40Planlayın

    Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and pos

    KritikCVSS 10,0İstismar yokEPSS %1

    geeklog · geeklog7 Mar 2006

  • CVE-2002-0962
    33İzleyin

    Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variabl

    YüksekCVSS 7,5Kavram kanıtıEPSS %8

    geeklog · geeklog4 Eki 2002

  • CVE-2006-2698
    32İzleyin

    Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request and possibly invalid argument

    YüksekCVSS 7,8İstismar yokEPSS %2

    geeklog · geeklog31 May 2006

  • CVE-2007-2706
    31İzleyin

    PHP remote file inclusion vulnerability in maint/ftpmedia.php in Media Gallery 1.4.8a and earlier for Geeklog allows remote attackers to exe

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    geeklog · media gallery16 May 2007

  • CVE-2006-0824
    31İzleyin

    Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers t

    YüksekCVSS 7,5İstismar yokEPSS %3

    geeklog · geeklog21 Şub 2006

  • CVE-2007-0810
    31İzleyin

    PHP remote file inclusion vulnerability in MVCnPHP/BaseView.php in GeekLog 2 and earlier allows remote attackers to execute arbitrary PHP co

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    geeklog · geeklog7 Şub 2007

  • CVE-2006-0823
    30İzleyin

    Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitra

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    geeklog · geeklog21 Şub 2006

  • CVE-2002-0097
    30İzleyin

    Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent

    YüksekCVSS 7,5İstismar yokEPSS %1

    geeklog · geeklog25 Mar 2002

  • CVE-2005-4725
    30İzleyin

    Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessi

    YüksekCVSS 7,5İstismar yokEPSS %1

    geeklog · geeklog31 Ara 2005

  • CVE-2006-2701
    30İzleyin

    SQL injection vulnerability in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors re

    YüksekCVSS 7,5İstismar yokEPSS %1

    geeklog · geeklog31 May 2006

  • CVE-2005-2152
    30İzleyin

    SQL injection vulnerability in Geeklog before 1.3.11 allows remote attackers to execute arbitrary SQL commands via user comments for an arti

    YüksekCVSS 7,5İstismar yokEPSS %1

    geeklog · geeklog6 Tem 2005

  • CVE-2010-4933
    30İzleyin

    SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the li

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    geeklog · geeklog9 Eki 2011

  • CVE-2006-2699
    28İzleyin

    Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inject arbitrary HTML or

    OrtaCVSS 6,8Kavram kanıtıEPSS %2

    geeklog · geeklog31 May 2006

  • CVE-2002-0096
    28İzleyin

    The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes the first newly create

    YüksekCVSS 7,2İstismar yokEPSS %0

    geeklog · geeklog25 Mar 2002

  • CVE-2006-3362
    22İzleyin

    Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through

    OrtaCVSS 5,1Kavram kanıtıEPSS %5

    geeklog · geeklog6 Tem 2006

  • CVE-2006-6225
    21İzleyin

    Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a URL in the _CONF[pa

    OrtaCVSS 5,1Kavram kanıtıEPSS %4

    geeklog · geeklog1 Ara 2006

  • CVE-2006-2700
    20İzleyin

    SQL injection vulnerability in admin/auth.inc.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands

    OrtaCVSS 5,1İstismar yokEPSS %1

    geeklog · geeklog31 May 2006

  • CVE-2002-1917
    20İzleyin

    CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail

    OrtaCVSS 5,0İstismar yokEPSS %1

    geeklog · geeklog31 Ara 2002

  • CVE-2002-0963
    20İzleyin

    SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via th

    OrtaCVSS 5,0İstismar yokEPSS %1

    geeklog · geeklog4 Eki 2002

  • CVE-2005-4026
    20İzleyin

    search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive information via invalid

    OrtaCVSS 5,0İstismar yokEPSS %1

    geeklog · geeklog5 Ara 2005

  • CVE-2023-46059
    19İzleyin

    Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted pa

    OrtaCVSS 4,8İstismar yokEPSS %0

    geeklog · geeklog23 Eki 2023

  • CVE-2023-46058
    19İzleyin

    Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted pa

    OrtaCVSS 4,8İstismar yokEPSS %0

    geeklog · geeklog23 Eki 2023

  • CVE-2023-37786
    19İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    geeklog · geeklog13 Tem 2023

  • CVE-2023-37787
    19İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted

    OrtaCVSS 4,8İstismar yokEPSS %0

    geeklog · geeklog13 Tem 2023