VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 21, 2006· Updated Jun 16, 2026

CVE-2006-0824

CVE-2006-0824

Description

Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and execute arbitrary code via (1) absolute paths in unspecified parameters and (2) the language cookie, as demonstrated for code execution using error.log.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Geeklog/Geeklog6 versions
    cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:*
    • cpe:2.3:a:geeklog:geeklog:1.3.11_sr1:*:*:*:*:*:*:*
    • cpe:2.3:a:geeklog:geeklog:1.3.11_sr2:*:*:*:*:*:*:*
    • cpe:2.3:a:geeklog:geeklog:1.3.11_sr3:*:*:*:*:*:*:*
    • cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*
    • (no CPE)range: <1.4.0sr1, <1.3.11sr4

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.