PT-2005-5390 · Geeklog · Geeklog

Lwc · Publicado 2005-12-31 · Atualizado 2008-09-05 · CVE-2005-4725

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Geeklog versions prior to 1.3.11sr3

Description The issue allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID.

Recommendations For versions prior to 1.3.11sr3, update to version 1.3.11sr3 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-4725

Produtos afetados

Geeklog

Referências · 4

• http://geeklog.net/forum/viewtopic.php?showtopic=61457 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4725 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4725 · Nota de Segurança
• http://geeklog.net/article.php/geeklog-1.3.11sr3 · Nota