Geeklog : Security Vulnerabilities, CVEs, Published In 2011 CVSS score >= 4
Multiple cross-site scripting (XSS) vulnerabilities in the story creation feature in Geeklog 1.8.0 allow remote attackers to inject arbitrary web script or HTML via the (1) code or (2) raw BBcode tags.
Max CVSS
4.3
EPSS Score
0.20%
Published
2011-11-30
Updated
2011-12-01
SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the lid parameter.
Max CVSS
7.5
EPSS Score
0.06%
Published
2011-10-09
Updated
2012-02-14
2 vulnerabilities found