CVE-2002-1917: Geeklog

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the Subject field and adding a BCC mail header.

Affected products

• Geeklog Geeklog: version 1.3.5_sr1 only; version 1.35 only

Published 2002-12-31. Last modified 2026-06-16.