Test ID:	1.3.6.1.4.1.25623.1.0.51849
Category:	CGI abuses
Title:	Geeklog Authentication SQL Injection Vulnerability
Summary:	NOSUMMARY
Description:	Description: The installed version of Geeklog, according to the version number, is vulnerable to a SQL injection attack during authentication, allowing an attacker to inject SQL code. This may allow an attacker to compromise the site, launch attacks against the database, disclose sensitive information and more. Versions up to and including 1.3.7sr1 are known to be vulnerable. Solution : Upgrade to 1.3.7sr2 or later. Risk factor : High CVSS Score: 7.5
Cross-Ref:	BugTraq ID: 7742 Common Vulnerability Exposure (CVE) ID: CVE-2002-0097 BugTraq ID: 3844 http://www.securityfocus.com/bid/3844 Bugtraq: 20020110 Cookie modification allows unauthenticated user login in Geeklog 1.3 (Google Search) http://online.securityfocus.com/archive/1/249443 http://www.iss.net/security_center/static/7869.php
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.