VULNERABILITY INTELLIGENCE

CVE-2005-4026

CVSS score5 MEDIUM

EPSS probability1.37%

CISA KEVNot currently listed

Published2005-12-05

Last modified2026-06-16

CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive information via invalid (1) datestart and (2) dateend parameters, which leaks the web server path in an error message.

Primary references

cve@mitre.org — Third Party Advisory
cve@mitre.org — Vendor Advisory
cve@mitre.org — Broken Link
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link