CVE-2006-2701

Name: CVE-2006-2701
Creator: NVD / NIST
Published: 2006-05-31T10:06:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.29%

Last modified Jun 16, 2026

CVE-2006-2701 is a vulnerability of currently unknown severity. SQL injection vulnerability in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to story submission.. EPSS estimates a 1.29% chance of exploitation in the next 30 days.

Description

SQL injection vulnerability in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to story submission.

Metrics

EPSS Probability

1.29%

66.6th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Geeklog	Geeklog	<= 1.4.0_sr2
Geeklog	Geeklog	1.3
Geeklog	Geeklog	1.3.5
Geeklog	Geeklog	1.3.5_sr1
Geeklog	Geeklog	1.3.6
Geeklog	Geeklog	1.3.7
Geeklog	Geeklog	1.3.7_sr1
Geeklog	Geeklog	1.3.7_sr2
Geeklog	Geeklog	1.3.7_sr3
Geeklog	Geeklog	1.3.7_sr4
Geeklog	Geeklog	1.3.7_sr5
Geeklog	Geeklog	1.3.8
Geeklog	Geeklog	1.3.8_1
Geeklog	Geeklog	1.3.8_1_sr1
Geeklog	Geeklog	1.3.8_1_sr2
Geeklog	Geeklog	1.3.8_1_sr3
Geeklog	Geeklog	1.3.8_1_sr4
Geeklog	Geeklog	1.3.8_1_sr5
Geeklog	Geeklog	1.3.8_1_sr6
Geeklog	Geeklog	1.3.9
Geeklog	Geeklog	1.3.9_rc1
Geeklog	Geeklog	1.3.9_rc2
Geeklog	Geeklog	1.3.9_rc3
Geeklog	Geeklog	1.3.9_sr1
Geeklog	Geeklog	1.3.9_sr2
Geeklog	Geeklog	1.3.9_sr3
Geeklog	Geeklog	1.3.9_sr4
Geeklog	Geeklog	1.3.10
Geeklog	Geeklog	1.3.10_rc1
Geeklog	Geeklog	1.3.10_rc2
Geeklog	Geeklog	1.3.10_rc3
Geeklog	Geeklog	1.3.11
Geeklog	Geeklog	1.3.11_rc1
Geeklog	Geeklog	1.3.11_sr1
Geeklog	Geeklog	1.3.11_sr2
Geeklog	Geeklog	1.3.11_sr3
Geeklog	Geeklog	1.3.11_sr4
Geeklog	Geeklog	1.4.0
Geeklog	Geeklog	1.4.0_beta1
Geeklog	Geeklog	1.4.0_sr1
Geeklog	Geeklog	1.35

References

http://secunia.com/advisories/20316Exploit, Patch, Vendor Advisory
http://www.geeklog.net/index.php?topic=SecurityPatch
http://www.vupen.com/english/advisories/2006/2050
https://exchange.xforce.ibmcloud.com/vulnerabilities/26863
http://secunia.com/advisories/20316Exploit, Patch, Vendor Advisory
http://www.geeklog.net/index.php?topic=SecurityPatch
http://www.vupen.com/english/advisories/2006/2050
https://exchange.xforce.ibmcloud.com/vulnerabilities/26863

Timeline

Published: May 31, 2006
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2006-2701?

SQL injection vulnerability in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to story submission.

How severe is CVE-2006-2701?

Severity scoring for CVE-2006-2701 is pending analysis. The EPSS model estimates a 1.29% probability of exploitation in the next 30 days.

How do I fix CVE-2006-2701?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2006-2701?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST