Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Geeklog Authentication SQL Injection Vulnerability

Geeklog is reported to be prone to SQL injection attacks during authentication. This is due to insufficient sanitization of cookie values, which could permit an attacker to inject SQL code. This issue could be exploited to compromise Geeklog or to potentially launch attacks against the database, allowing for disclosure of sensitive information or other consequences.







 

Privacy Statement
Copyright 2009, SecurityFocus