PT-2005-4762 · Geeklog · Geeklog

R0T3D3Vil · Published 2005-12-05 · Updated 2018-09-27 · CVE-2005-4026

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Geeklog versions 1.3.x through 1.3.11sr2 Geeklog versions 1.4.x through 1.4.0rc1

Description The issue allows remote attackers to obtain sensitive information via invalid datestart and dateend parameters in the "search.php" file, which leaks the web server path in an error message.

Recommendations For Geeklog versions 1.3.x through 1.3.11sr2, update to version 1.3.11sr3. For Geeklog versions 1.4.x through 1.4.0rc1, update to version 1.4.0rc1 or later.

Fix

Related Identifiers

CVE-2005-4026

Affected Products

Geeklog

References · 5

• http://geeklog.net/article.php/geeklog-1.3.11sr3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4026 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4026 · Note
• http://pridels0.blogspot.com/2005/11/geeklog-14x-full-path-disclosure-vuln.html · Note
• http://osvdb.org/21398 · Note