high7.5
CVE-2005-4725
Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID.
Impact
Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Geeklog | Geeklog | Versions 1.3.8_1_sr3, 1.3.8_1_sr4, 1.3.9, 1.3.9_rc1, 1.3.9_rc2, 1.3.9_rc3 |