CVE-2006-0823 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 1.7% (pctl 76)
Patch early
A public exploit exists.
Description
Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the (1) userid variable to users.php or (2) sessid variable to lib-sessions.php.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 1.67% — more likely to be exploited than 76% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-02-21 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| geeklog | geeklog |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Geeklog < 1.4.0 - Multiple Vulnerabilities | 2016-02-19 |
References
- http://secunia.com/advisories/18920
- http://www.geeklog.net/article.php/geeklog-1.4.0sr1
- http://www.gulftech.org/?node=research&article_id=00102-02192006
- http://www.osvdb.org/23348
- http://www.securityfocus.com/archive/1/425506/100/0/threaded
- http://www.securityfocus.com/bid/16755
- http://www.vupen.com/english/advisories/2006/0661
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24775
- http://secunia.com/advisories/18920
- http://www.geeklog.net/article.php/geeklog-1.4.0sr1
- http://www.gulftech.org/?node=research&article_id=00102-02192006
- http://www.osvdb.org/23348
- http://www.securityfocus.com/archive/1/425506/100/0/threaded
- http://www.securityfocus.com/bid/16755
- http://www.vupen.com/english/advisories/2006/0661
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24775
→ the Explorer · watch your stack · NVD