CVE-2006-2698: Geeklog

High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request and possibly invalid arguments to (1) layout/professional/functions.php or (2) getimage.php.

Affected products

• Geeklog Geeklog: up to and including 1.4.0_sr2; version 1.3 only; version 1.3.5 only; version 1.3.5_sr1 only; version 1.3.6 only; version 1.3.7 only; …

Published 2006-05-31. Last modified 2026-06-16.