CVE-2005-4725: Geeklog

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID.

Affected products

• Geeklog Geeklog: version 1.3.8_1_sr3 only; version 1.3.8_1_sr4 only; version 1.3.9 only; version 1.3.9_rc1 only; version 1.3.9_rc2 only; version 1.3.9_rc3 only; …

Published 2005-12-31. Last modified 2026-06-16.