PatchTheCVEgeeklog vulnerabilities and fixes
Recent CVEs affecting geeklog, with upgrade or downgrade steps. 10 tracked.
geeklog has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-10-24. Highest priority: CVE-2010-4933 (score 47/100).
- CVE-2023-46059 MEDIUM 4.8 DOWNGRADE Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute a
- CVE-2023-46058 MEDIUM 4.8 DOWNGRADE Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute a
- CVE-2023-37787 MEDIUM 4.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web
- CVE-2023-37786 MEDIUM 4.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web
- CVE-2016-4849 MEDIUM 6.1 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Geeklog IVYWE edition 2.1.1 allow remote attackers to i
- CVE-2013-1470 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in calendar/index.php in the Calendar plugin in Geeklog before 1.8.2s
- CVE-2011-5159 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote a
- CVE-2011-4942 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in admin/configuration.php in Geeklog before 1.7.1sr1 allo
- CVE-2011-4647 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in the story creation feature in Geeklog 1.8.0 allow remot
- CVE-2010-4933 HIGH 7.5 DOWNGRADE SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arb
FAQ
How do I fix geeklog vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is geeklog being exploited right now?
None of the tracked geeklog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which geeklog CVE should I patch first?
CVE-2010-4933 currently ranks highest (47/100): SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arb.