CVE-2006-2700: Geeklog

Medium severity, CVSS 5.1. EPSS: 1.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in admin/auth.inc.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the loginname parameter.

Affected products

• Geeklog Geeklog: up to and including 1.4.0_sr2; version 1.3 only; version 1.3.5 only; version 1.3.5_sr1 only; version 1.3.6 only; version 1.3.7 only; …

Published 2006-05-31. Last modified 2026-06-16.