CVE:CVE-2005-2152
CNNVD:CNNVD-200507-062
Geeklog是一套免费的Web应用系统。
Geeklog 1.3.11之前版本中存在SQL注入漏洞。
远程攻击者可通过对文章的用户评论字段，执行任意SQL命令。
solution:Upgrade geeklog geeklog to a higher version than 1.3.6,1.3.7,1.3.7_sr1,1.3.7_sr2,1.3.7_sr3,1.3.7_sr4,1.3.7_sr5,1.3.8,1.3.8_1,1.3.8_1_sr1,1.3.8_1_sr2,1.3.8_1_sr3,1.3.8_1_sr4,1.3.8_1_sr5,1.3.8_1_sr6,1.3.9_sr1,1.3.9_sr2,1.3.9_sr3,1.3.10,and avoid the version 1.3.6,1.3.7,1.3.7_sr1,1.3.7_sr2,1.3.7_sr3,1.3.7_sr4,1.3.7_sr5,1.3.8,1.3.8_1,1.3.8_1_sr1,1.3.8_1_sr2,1.3.8_1_sr3,1.3.8_1_sr4,1.3.8_1_sr5,1.3.8_1_sr6,1.3.9_sr1,1.3.9_sr2,1.3.9_sr3,1.3.10