CVE-2002-0963 Information

Description

SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter.

Reference

http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.html http://geeklog.sourceforge.net/article.php?story=20020610013358149 http://www.iss.net/security_center/static/9311.php http://www.securityfocus.com/bid/4968