CVE-2005-4725

Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID.

Date published : 2006-02-20

http://www.geeklog.net/article.php/geeklog-1.3.11sr3

http://www.geeklog.net/forum/viewtopic.php?showtopic=61457