CVE-2002-0963: Geeklog

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter.

Affected products

• Geeklog Geeklog: up to and including 1.3.5

Published 2002-10-04. Last modified 2026-06-16.