Vulnerabilities > CVE-2006-2701 - SQL-Injection vulnerability in Geeklog (Extended Japanese Package)

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

geeklog

NVD

Published: 2006-05-31

Updated: 2017-07-20

Summary

SQL injection vulnerability in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to story submission.

Vulnerable Configurations

Part	Description	Count
Application	Geeklog Geeklog Geeklog 1.3 Geeklog Geeklog 1.3.5 Geeklog Geeklog 1.3.5_Sr1 Geeklog Geeklog 1.3.6 Geeklog Geeklog 1.3.7 Geeklog Geeklog 1.3.7_Sr1 Geeklog Geeklog 1.3.7_Sr2 Geeklog Geeklog 1.3.7_Sr3 Geeklog Geeklog 1.3.7_Sr4 Geeklog Geeklog 1.3.7_Sr5 Geeklog Geeklog 1.3.8 Geeklog Geeklog 1.3.8_1 Geeklog Geeklog 1.3.8_1_Sr1 Geeklog Geeklog 1.3.8_1_Sr2 Geeklog Geeklog 1.3.8_1_Sr3 Geeklog Geeklog 1.3.8_1_Sr4 Geeklog Geeklog 1.3.8_1_Sr5 Geeklog Geeklog 1.3.8_1_Sr6 Geeklog Geeklog 1.3.9 Geeklog Geeklog 1.3.9_Rc1 Geeklog Geeklog 1.3.9_Rc2 Geeklog Geeklog 1.3.9_Rc3 Geeklog Geeklog 1.3.9_Sr1 Geeklog Geeklog 1.3.9_Sr2 Geeklog Geeklog 1.3.9_Sr3 Geeklog Geeklog 1.3.9_Sr4 Geeklog Geeklog 1.3.10 Geeklog Geeklog 1.3.10_Rc1 Geeklog Geeklog 1.3.10_Rc2 Geeklog Geeklog 1.3.10_Rc3 Geeklog Geeklog 1.3.11 Geeklog Geeklog 1.3.11_Rc1 Geeklog Geeklog 1.3.11_Sr1 Geeklog Geeklog 1.3.11_Sr2 Geeklog Geeklog 1.3.11_Sr3 Geeklog Geeklog 1.3.11_Sr4 Geeklog Geeklog 1.4.0 Geeklog Geeklog 1.4.0_Beta1 Geeklog Geeklog 1.4.0_Sr1 Geeklog Geeklog 1.3.0 Geeklog Geeklog 1.35	57

Summary

Vulnerable Configurations

References