medium5.0
CVE-2002-0963
SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter.
Impact
SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Geeklog | Geeklog | through 1.3.5 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.html
- http://geeklog.sourceforge.net/article.php?story=20020610013358149
- http://www.iss.net/security_center/static/9311.php
- http://www.securityfocus.com/bid/4968
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.html
- http://geeklog.sourceforge.net/article.php?story=20020610013358149
- http://www.iss.net/security_center/static/9311.php
- http://www.securityfocus.com/bid/4968