CVE:CVE-2006-0823
CNNVD:CNNVD-200602-334
Geeklog 中存在多个SQL注入漏洞。远程攻击者可以借助(1)指向users.php的userid变量或(2)指向lib-sessions.php的sessid变量注入任意SQL命令。
solution:Upgrade geeklog geeklog to a higher version than 1.3.11,1.3.11_sr1,1.3.11_sr2,1.3.11_sr3,1.4.0,and avoid the version 1.3.11,1.3.11_sr1,1.3.11_sr2,1.3.11_sr3,1.4.0