CVE-2005-2152 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2005-2152

Deferred

More Info Official Page

Source-cve@mitre.org

Published At-06 Jul, 2005 | 04:00

Updated At-03 Apr, 2025 | 01:03

SQL injection vulnerability in Geeklog before 1.3.11 allows remote attackers to execute arbitrary SQL commands via user comments for an article.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

geeklog>>geeklog>>1.3.6

cpe:2.3:a:geeklog:geeklog:1.3.6:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.7

cpe:2.3:a:geeklog:geeklog:1.3.7:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.7_sr1

cpe:2.3:a:geeklog:geeklog:1.3.7_sr1:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.7_sr2

cpe:2.3:a:geeklog:geeklog:1.3.7_sr2:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.7_sr3

cpe:2.3:a:geeklog:geeklog:1.3.7_sr3:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.7_sr4

cpe:2.3:a:geeklog:geeklog:1.3.7_sr4:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.7_sr5

cpe:2.3:a:geeklog:geeklog:1.3.7_sr5:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.8

cpe:2.3:a:geeklog:geeklog:1.3.8:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.8_1

cpe:2.3:a:geeklog:geeklog:1.3.8_1:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.8_1_sr1

cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr1:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.8_1_sr2

cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr2:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.8_1_sr3

cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr3:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.8_1_sr4

cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr4:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.8_1_sr5

cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr5:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.8_1_sr6

cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr6:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.9_sr1

cpe:2.3:a:geeklog:geeklog:1.3.9_sr1:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.9_sr2

cpe:2.3:a:geeklog:geeklog:1.3.9_sr2:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.9_sr3

cpe:2.3:a:geeklog:geeklog:1.3.9_sr3:*:*:*:*:*:*:*

geeklog>>geeklog>>1.3.10

cpe:2.3:a:geeklog:geeklog:1.3.10:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/15914	cve@mitre.org	N/A
http://securitytracker.com/id?1014381	cve@mitre.org	N/A
http://www.geeklog.net/article.php/geeklog-1.3.11sr1	cve@mitre.org	Patch Vendor Advisory
http://www.hardened-php.net/advisory-062005.php	cve@mitre.org	Patch Vendor Advisory
http://secunia.com/advisories/15914	af854a3a-2127-422b-91ae-364da2661108	N/A
http://securitytracker.com/id?1014381	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.geeklog.net/article.php/geeklog-1.3.11sr1	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.hardened-php.net/advisory-062005.php	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory