PT-2005-5390 · Geeklog · Geeklog

Lwc · Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4725

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Geeklog versions prior to 1.3.11sr3

Description The issue allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID.

Recommendations For versions prior to 1.3.11sr3, update to version 1.3.11sr3 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-4725

Affected Products

Geeklog

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-4725 · Security Note
• http://geeklog.net/forum/viewtopic.php?showtopic=61457 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4725 · Note
• http://geeklog.net/article.php/geeklog-1.3.11sr3 · Note