SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter.
http://www.securityfocus.com/bid/4968
http://www.iss.net/security_center/static/9311.php
http://geeklog.sourceforge.net/article.php?story=20020610013358149
http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.html