CVE-2005-4026: Geeklog

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive information via invalid (1) datestart and (2) dateend parameters, which leaks the web server path in an error message.

Affected products

• Geeklog Geeklog: from 1.3.0, up to and including 1.3.11; version 1.3.11 only; version 1.4.0 only

Published 2005-12-05. Last modified 2026-06-16.