CVEvulnerability
CVE-2006-3756
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-07-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Geeklog 1.4.0sr4 and earlier, and 1.3.11sr6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when validating comments in (1) lib-comment.php (1.4.0sr4) or (2) comment.php (0.3.11sr6).
Affected configurations
• geeklog geeklog 1.3.11
• geeklog geeklog 1.4.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://jvn.jp/jp/JVN%2381108784/index.html Third Party Advisory
- http://secunia.com/advisories/21094 Third Party Advisory
- http://www.geeklog.net/article.php/geeklog-1.4.0sr5 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2006/2865 Permissions Required, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27813 Third Party Advisory, VDB Entry
- http://jvn.jp/jp/JVN%2381108784/index.html Third Party Advisory
- http://secunia.com/advisories/21094 Third Party Advisory
- http://www.geeklog.net/article.php/geeklog-1.4.0sr5 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2006/2865 Permissions Required, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27813 Third Party Advisory, VDB Entry