Secunia Logo  


Secunia PSI WorldMap
 
Vulnerability Report: Geeklog 1.x
This vulnerability report for Geeklog 1.x contains a complete overview of all Secunia advisories affecting it. You can use this vulnerability report to ensure that you are aware of all vulnerabilities, both patched and unpatched, affecting this product allowing you to take the necessary precautions.

If you have information about a new or an existing vulnerability in Geeklog 1.x then you are more than welcome to contact us.


Table of Contents

1. Product Summary Only

2. Secunia Advisory Statistics (All time)
2.1. Statistics for 2009
2.2. Statistics for 2008
2.3. Statistics for 2007
2.4. Statistics for 2006
2.5. Statistics for 2005
2.6. Statistics for 2004
2.7. Statistics for 2003

3. List of Secunia Advisories (All time)
3.1. List for 2009
3.2. List for 2008
3.3. List for 2007
3.4. List for 2006
3.5. List for 2005
3.6. List for 2004
3.7. List for 2003

4. Send Feedback
 
Vendor, Links, and Unpatched Vulnerabilities

Vendor N/A

Product Link View Here (Link to external site)

Affected By 14 Secunia advisories
19 Vulnerabilities

Monitor Product Receive alerts for this product

Unpatched 14% (2 of 14 Secunia advisories)

Most Critical Unpatched
The most severe unpatched Secunia advisory affecting Geeklog 1.x, with all vendor patches applied, is rated Less critical .




14 Secunia Advisories in 2003-2009
Secunia has issued a total of 14 Secunia advisories in 2003-2009 for Geeklog 1.x. Currently, 14% (2 out of 14) are marked as unpatched with the most severe being rated Less critical

More information about the specific Secunia advisories affecting Geeklog 1.x can be found below. Each Secunia advisory is enclosed by a box highlighted with a color representing its current patch status. You can read the complete Secunia advisories for thorough descriptions of the issues covered and for solution suggestions by clicking either the Secunia advisory title or the "Read More" links available for each Secunia advisory.



Geeklog Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 1 of 4 in 2009. 640 views.
Release Date:
2009-08-21
Secunia Advisory ID:
SA36372
Solution Status:
Vendor Patch
Criticality:
Impact:
Security Bypass
Cross Site Scripting
Manipulation of data
Where:
From remote
Short Description:
Some vulnerabilities have been reported in Geeklog, which can be exploited by malicious people to bypass certain security restrictions or conduct cross-site scripting attacks. [Read More]


Geeklog "savepreferences()" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 2 of 4 in 2009. 658 views.
Release Date:
2009-04-17
Secunia Advisory ID:
SA34765
Solution Status:
Vendor Patch
Criticality:
Impact:
Manipulation of data
System access
Where:
From remote
Short Description:
bookoo has discovered a vulnerability in Geeklog, which can be exploited by malicious users to conduct SQL injection attacks and compromise a vulnerable system. [Read More]


Geeklog "SESS_updateSessionTime()" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 3 of 4 in 2009. 1,377 views.
Release Date:
2009-04-13
Secunia Advisory ID:
SA34672
Solution Status:
Vendor Patch
Criticality:
Impact:
Manipulation of data
Where:
From remote
Short Description:
A vulnerability has been reported in Geeklog, which can be exploited by malicious people to conduct SQL injection attacks. [Read More]


Geeklog "SEC_authenticate()" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 4 of 4 in 2009. 549 views.
Release Date:
2009-04-13
Secunia Advisory ID:
SA34679
Solution Status:
Vendor Patch
Criticality:
Impact:
Manipulation of data
System access
Where:
From remote
Short Description:
A vulnerability has been discovered in Geeklog, which can be exploited by malicious people to conduct SQL injection attacks and compromise a vulnerable system. [Read More]


Geeklog Comment Handling Cross-Site Scripting
Vendor Patch. Secunia Advisory 1 of 4 in 2006. 5,715 views.
Release Date:
2006-07-19
Secunia Advisory ID:
SA21094
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
A vulnerability has been reported in Geeklog, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]


Geeklog "connector.php" File Upload Vulnerability
Vendor Patch. Secunia Advisory 2 of 4 in 2006. 8,117 views.
Release Date:
2006-06-30
Secunia Advisory ID:
SA20886
Solution Status:
Vendor Patch
Criticality:
Impact:
System access
Where:
From remote
Short Description:
rgod has discovered a vulnerability in Geeklog, which can be exploited by malicious people to compromise a vulnerable system. [Read More]


Geeklog Multiple Vulnerabilities and Weaknesses
Vendor Patch. Secunia Advisory 3 of 4 in 2006. 6,148 views.
Release Date:
2006-05-30
Secunia Advisory ID:
SA20316
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Manipulation of data
Exposure of system information
Where:
From remote
Short Description:
trueend5 has reported some vulnerabilities and weaknesses in Geeklog, which can be exploited by malicious people to disclose system information, and conduct cross-site scripting and SQL injection attacks. [Read More]


Geeklog SQL Injection and File Inclusion Vulnerabilities
Vendor Patch. Secunia Advisory 4 of 4 in 2006. 6,887 views.
Release Date:
2006-02-20
Secunia Advisory ID:
SA18920
Solution Status:
Vendor Patch
Criticality:
Impact:
Manipulation of data
Exposure of sensitive information
System access
Where:
From remote
Short Description:
James Bercegay has reported some vulnerabilities in Geeklog, which can be exploited by malicious people to conduct SQL injection attacks, disclose potentially sensitive information and potentially to compromise a vulnerable system. [Read More]


Geeklog Unspecified SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 1 of 1 in 2005. 5,647 views.
Release Date:
2005-07-05
Secunia Advisory ID:
SA15914
Solution Status:
Vendor Patch
Criticality:
Impact:
Manipulation of data
Where:
From remote
Short Description:
Stefan Esser has reported a vulnerability in Geeklog, which can be exploited by malicious people to conduct SQL injection attacks. [Read More]


Geeklog Password Request SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 1 of 5 in 2003. 6,413 views.
Release Date:
2003-10-20
Secunia Advisory ID:
SA10029
Solution Status:
Vendor Patch
Criticality:
Impact:
Manipulation of data
Where:
From remote
Short Description:
A vulnerability has been reported in Geeklog allowing malicious users to manipulate SQL queries. [Read More]


Geeklog Cross Site Scripting and Weak Session Control
Unpatched. Secunia Advisory 2 of 5 in 2003. 5,724 views.
Release Date:
2003-10-08
Secunia Advisory ID:
SA9966
Solution Status:
Unpatched
Criticality:
Impact:
Security Bypass
Cross Site Scripting
Exposure of sensitive information
Where:
From remote
Short Description:
Multiple vulnerabilities have been reported in Geeklog allowing malicious people to conduct Cross Site Scripting and retrieve password hashes. [Read More]


Geeklog Cross Site Scripting Vulnerabilities
Unpatched. Secunia Advisory 3 of 5 in 2003. 5,659 views.
Release Date:
2003-09-30
Secunia Advisory ID:
SA9874
Solution Status:
Unpatched
Criticality:
Impact:
Cross Site Scripting
Manipulation of data
Where:
From remote
Short Description:
Two vulnerabilities have been identified in Geeklog allowing malicious people to conduct Cross Site Scripting. [Read More]


Geeklog Admin Access and Execution of Arbitrary Code
Vendor Patch. Secunia Advisory 4 of 5 in 2003. 6,585 views.
Release Date:
2003-05-30
Secunia Advisory ID:
SA8895
Solution Status:
Vendor Patch
Criticality:
Impact:
System access
Where:
From remote
Short Description:
Two vulnerabilities have been identified in Geeklog. One allowing anyone to become a user and escalate their privileges to admin, the other allowing upload of arbitrary code. [Read More]


Geeklog Cross Site Scripting
Vendor Patch. Secunia Advisory 5 of 5 in 2003. 5,328 views.
Release Date:
2003-01-16
Secunia Advisory ID:
SA7883
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
Geeklog is vulnerable to trivial Cross Site Scripting: [Read More]