Description
SQL injection vulnerability in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to story submission.
References
- http://www.geeklog.net/index.php?topic=Security
- ADV-2006-2050 vdb-entry
- geeklog-auth-libsecurity-sql-injection(26863) vdb-entry
- 20316 third-party-advisory