Description
Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inject arbitrary HTML or web script via the image argument in a show action.
Exploits (1)
References (8)
Core 8
Core References
Patch x_refsource_confirm
http://www.geeklog.net/index.php?topic=Security
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/993
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/435295/100/0/threaded
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2050
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/26862
Exploit, Patch, Vendor Advisory x_refsource_misc
http://kapda.ir/advisory-336.html
Exploit, Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/20316
Exploit, Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/18154
Scores
EPSS
0.0161
EPSS Percentile
81.9%
Details
Status
published
Products (41)
geeklog/geeklog
1.3
geeklog/geeklog
1.3.5
geeklog/geeklog
1.3.5_sr1
geeklog/geeklog
1.3.6
geeklog/geeklog
1.3.7
geeklog/geeklog
1.3.7_sr1
geeklog/geeklog
1.3.7_sr2
geeklog/geeklog
1.3.7_sr3
geeklog/geeklog
1.3.7_sr4
geeklog/geeklog
1.3.7_sr5
... and 31 more
Published
May 31, 2006
Tracked Since
Feb 18, 2026