Unrated severityNVD Advisory· Published Sep 9, 2012· Updated Apr 29, 2026
CVE-2011-4942
CVE-2011-4942
Description
Multiple cross-site scripting (XSS) vulnerabilities in admin/configuration.php in Geeklog before 1.7.1sr1 allow remote attackers to inject arbitrary web script or HTML via the (1) subgroup or (2) conf_group parameters. NOTE: this vulnerability might require a user-assisted attack or a bypass of a CSRF protection mechanism.
Affected products
14cpe:2.3:a:geeklog:geeklog:*:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:geeklog:geeklog:*:*:*:*:*:*:*:*range: <=1.7.1
- cpe:2.3:a:geeklog:geeklog:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.3.10:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.35:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.3.7:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.3.8:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.3.9:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.5.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- secunia.com/advisories/42775nvdVendor Advisory
- www.geeklog.net/article.php/geeklog-1.7.1sr1nvd
- www.openwall.com/lists/oss-security/2011/03/18/8nvd
- www.openwall.com/lists/oss-security/2012/03/23/13nvd
- www.openwall.com/lists/oss-security/2012/03/23/5nvd
- www.osvdb.org/70245nvd
- yehg.net/lab/pr0js/advisories/%5Bgeeklog1.7.1%5D_cross_site_scriptingnvd
News mentions
0No linked articles in our index yet.