Test ID:	1.3.6.1.4.1.25623.1.0.56895
Category:	CGI abuses
Title:	Geeklog < 1.4.0sr1, 1.3.11sr4 Multiple Vulnerabilities
Summary:	NOSUMMARY
Description:	Description: The installed version of Geeklog, according to the version number, is vulnerable to multiple vulnerabilities, including a SQL injection attack and local file disclosure vulnerabilities as a result of insufficient sanitization of user supplied input. Versions prior to 1.4.0sr1 and 1.3.11sr4 are vulnerable. Solution : Upgrade to 1.4.0sr1 or 1.3.11sr4 or later. Risk factor : High CVSS Score: 7.5
Cross-Ref:	BugTraq ID: 16755 Common Vulnerability Exposure (CVE) ID: CVE-2006-0823 http://www.securityfocus.com/bid/16755 Bugtraq: 20060219 Geeklog Remote Code Execution (Google Search) http://www.securityfocus.com/archive/1/425506/100/0/threaded http://www.gulftech.org/?node=research&article_id=00102-02192006 http://www.osvdb.org/23348 http://secunia.com/advisories/18920 http://www.vupen.com/english/advisories/2006/0661 XForce ISS Database: geeklog-users-sessions-sql-injection(24775) https://exchange.xforce.ibmcloud.com/vulnerabilities/24775 Common Vulnerability Exposure (CVE) ID: CVE-2006-0824 http://www.osvdb.org/23349
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.