| Package | Affected versions | Patched versions |
|---|---|---|
| geeklog | = 1.3= 1.3.10= 1.3.10_rc1= 1.3.10_rc2= 1.3.10_rc3= 1.3.11= 1.3.11_rc1= 1.3.11_sr1= 1.3.11_sr2= 1.3.11_sr3= 1.3.11_sr4= 1.3.5= 1.3.5_sr1= 1.3.6= 1.3.7= 1.3.7_sr1= 1.3.7_sr2= 1.3.7_sr3= 1.3.7_sr4= 1.3.7_sr5= 1.3.8= 1.3.8_1= 1.3.8_1_sr1= 1.3.8_1_sr2= 1.3.8_1_sr3= 1.3.8_1_sr4= 1.3.8_1_sr5= 1.3.8_1_sr6= 1.3.9= 1.3.9_rc1= 1.3.9_rc2= 1.3.9_rc3= 1.3.9_sr1= 1.3.9_sr2= 1.3.9_sr3= 1.3.9_sr4= 1.35= 1.4.0= 1.4.0_beta1= 1.4.0_sr1≤ 1.4.0_sr2 |
Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request and possibly invalid arguments to (1) layout/professional/functions.php or (2) getimage.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free