Vulnerability Database

290,301

Total vulnerabilities in the database

CVE-2006-6225

Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a URL in the _CONF[path] parameter to (1) links/functions.inc, (2) polls/functions.inc, (3) spamx/BlackList.Examine.class.php, (4) spamx/DeleteComment.Action.class.php, (5) spamx/EditIPofURL.Admin.class.php, (6) spamx/MTBlackList.Examine.class.php, (7) spamx/MassDelete.Admin.class.php, (8) spamx/MailAdmin.Action.class.php, (9) spamx/MassDelTrackback.Admin.class.php, (10) spamx/EditHeader.Admin.class.php, (11) spamx/EditIP.Admin.class.php, (12) spamx/IPofUrl.Examine.class.php, (13) spamx/Import.Admin.class.php, (14) spamx/LogView.Admin.class.php, and (15) staticpages/functions.inc, in the plugins/ directory.

  • Published: Dec 2, 2006
  • Updated: Apr 13, 2023
  • CVE: CVE-2006-6225
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5.1
  • AV:N/AC:H/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
geeklog / geeklog 1.4.0_sr1 1.4.0_sr1.x
geeklog / geeklog 1.4.0_beta1 1.4.0_beta1.x
geeklog / geeklog 1.4.0_sr2 1.4.0_sr2.x
geeklog / geeklog 1.4.0_sr3 1.4.0_sr3.x
geeklog / geeklog 1.4.0 1.4.0.x
geeklog / geeklog 1.4.0_sr4 1.4.0_sr4.x