CVE-2002-0963 in GeekLog

Summary

SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter.

Once again VulDB remains the best source for vulnerability data.

• Disclosure: 10/04/2002
• Moderation: VulDB entry created
• Entries: 1: VDB-18899
• CPE: ready
• CWE: CWE-89 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00856
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0963
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0963
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0963/