CVE-2005-4725

Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-12-31

Last modified

2024-09-16

Affected products

• Geeklog (Geeklog)

References

• http://www.geeklog.net/article.php/geeklog-1.3.11sr3
• http://www.geeklog.net/forum/viewtopic.php?showtopic=61457