Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2002-0097

EPSS 0.74% · P73
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2002-0097

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Geeklog利用永久Cookie劫持账号漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Geeklog是一个免费的、开放源码的Web应用程序。它可以使用户创建一个虚拟的社区，可以管理用户，张贴文章等。Geeklog采用PHP实现，以MySQL为后台数据库，可以在所有支持PHP和MySQL的平台如UNIX、Linux和Windows下使用。 Geeklog在处理Cookie上存在漏洞，可以使攻击者在不知道口令的情况下以任何有效用户ID登录系统。 Geeklog可以被配置成使用永久性的Cookie，在以后的登录过程中将会使用Cookie里的信息进行认证。Cookie中包含一个UID字段，geek
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2002-0097

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2002-0097

请登录查看更多情报信息。

Same Patch Batch · n/a · 2002-06-25 · 190 CVEs total

CVE-2002-0027Microsoft Internet Explorer安全漏洞
CVE-2002-0002STunnel客户端协商协议格式串溢出漏洞
CVE-2002-0003Groff预处理器缓冲区溢出漏洞
CVE-2002-0004AT 畸形时间格式导致堆溢出漏洞
CVE-2002-0007BugZilla LDAP认证绕过漏洞
CVE-2002-0018Microsoft Windows网络域间信任关系提升权限漏洞(MS02-001)
CVE-2002-0020Microsoft Telnet Server协议选项缓冲溢出漏洞(MS02-004)
CVE-2002-0021Macintosh Microsoft Office v. X Network PID检查器服务拒绝漏洞
CVE-2002-0022Microsoft Internet Explorer安全漏洞
CVE-2002-0023Microsoft Internet Explorer安全漏洞
CVE-2002-0025Microsoft Internet Explorer安全漏洞
CVE-2002-0026Microsoft Internet Explorer安全漏洞
CVE-2002-0045OpenLDAP认证用户目标属性缺失漏洞
CVE-2002-0051Microsoft Windows 2000组策略锁定漏洞(MS02-016)
CVE-2002-0050Microsoft Commerce Server ISAPI远程缓冲区溢出漏洞(MS02-033)
CVE-2002-0049Microsoft Exchange Server 安全漏洞
CVE-2002-0047CIPE VPN数据包服务拒绝漏洞
CVE-2002-0046Linux kernel内存信息泄露漏洞
CVE-2002-0040SGI IRIX HOSTALIASES拒绝服务攻击漏洞
CVE-2002-0028ICQ缓冲区溢出漏洞

Showing top 20 of 190 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2002-0097

No comments yet

Leave a comment