CVEvulnerability
CVE-2005-4026
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive information via invalid (1) datestart and (2) dateend parameters, which leaks the web server path in an error message.
Affected configurations
• geeklog geeklog (>= 1.3.0 <= 1.3.11)
• geeklog geeklog 1.3.11
• geeklog geeklog 1.4.0
References
- http://pridels0.blogspot.com/2005/11/geeklog-14x-full-path-disclosure-vuln.html Third Party Advisory
- http://www.geeklog.net/article.php/geeklog-1.3.11sr3 Vendor Advisory
- http://www.osvdb.org/21398 Broken Link
- http://pridels0.blogspot.com/2005/11/geeklog-14x-full-path-disclosure-vuln.html Third Party Advisory
- http://www.geeklog.net/article.php/geeklog-1.3.11sr3 Vendor Advisory
- http://www.osvdb.org/21398 Broken Link