CVE-2011-5159
09.09.2012, 21:55
Cross-site scripting (XSS) vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary web script or HTML via the sub_group parameter, a different vulnerability than CVE-2011-4942.
| Vendor | Product | Version |
|---|---|---|
| geeklog | geeklog | 𝑥 ≤ 1.7.1 |
| geeklog | geeklog | 1.3 |
| geeklog | geeklog | 1.3.5 |
| geeklog | geeklog | 1.3.6 |
| geeklog | geeklog | 1.3.7 |
| geeklog | geeklog | 1.3.8 |
| geeklog | geeklog | 1.3.9 |
| geeklog | geeklog | 1.3.10 |
| geeklog | geeklog | 1.3.11 |
| geeklog | geeklog | 1.4.0 |
| geeklog | geeklog | 1.5.0 |
| geeklog | geeklog | 1.5.1 |
| geeklog | geeklog | 1.5.2 |
| geeklog | geeklog | 1.35 |
𝑥
= Vulnerable software versions