CVEブラウザに戻る

CVE-2002-0097

HIGH

7.5

CVSS Severity Score

EPSS Score0.1480%

EPSS Percentile21.28th

Published2002年3月25日

Last Modified2026年4月16日

Vulnerability Description

Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account.

Affected Platforms (CPE)

📦

Geeklog

Geeklog

= 1.3

References & Advisories

🔗 http://geeklog.sourceforge.net/index.php?topic=Security

🔗 http://online.securityfocus.com/archive/1/249443

🔗 http://www.iss.net/security_center/static/7869.php

🔗 http://www.securityfocus.com/bid/3844

🔗 http://geeklog.sourceforge.net/index.php?topic=Security

🔗 http://online.securityfocus.com/archive/1/249443

🔗 http://www.iss.net/security_center/static/7869.php

🔗 http://www.securityfocus.com/bid/3844

関連する脆弱性情報

CVE-2006-106910.0

Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr...

CVE-2006-26987.8

Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request and possibly invali...

CVE-2005-47257.5

Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic...

CVE-2002-09627.5

Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the u...