CVE-2006-0823 json
Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitr…
published 2006-02-21 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-0829
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.7%
- EPSS 1.7% chance of exploitation in 30 days, percentile 76%
- public exploits
- 1
- Exploit-DB
Summary
Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the (1) userid variable to users.php or (2) sessid variable to lib-sessions.php.
Patch / fix
- secunia.com/advisories/18920 advisory
Timeline
- Published
- First public exploit (EDB-43833)
Exploit prediction
1.67% chance of exploitation in the next 30 days, higher than 76% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-43833 Geeklog < 1.4.0 - Multiple Vulnerabilities webapps, 2016-02-19
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
secunia.com
/advisories/18920
third-party-advisory, patch, vendor-advisory
-
vupen.com
/english/advisories/2006/0661
vdb-entry
- geeklog.net /article.php/geeklog-1.4.0sr1
-
osvdb.org
/23348
vdb-entry
-
securityfocus.com
/bid/16755
vdb-entry
-
securityfocus.com
/archive/1/425506/100/0/threaded
mailing-list
-
exchange.xforce.ibmcloud.com
/vulnerabilities/24775
vdb-entry
- gulftech.org /?node=research&article_id=00102-02192006
Sources
- CVE List CVE-2006-0823
- NVD CVE-2006-0823
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.