Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2007-2290

Disclosure Date: April 26, 2007 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to (1) b2archives.php, (2) b2categories.php, or (3) b2mail.php. NOTE: this may overlap CVE-2002-1466.
0
0
Attacker Value
Unknown

CVE-2006-6830

Disclosure Date: December 31, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in b2verifauth.php in b2 Blog 0.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the index parameter.
0
0
Attacker Value
Unknown

CVE-2002-1465

Disclosure Date: April 22, 2003 (last updated February 22, 2025)
SQL injection vulnerability in CafeLog b2 Weblog Tool allows remote attackers to execute arbitrary SQL code via the tablehosts variable.
0
0
Attacker Value
Unknown

CVE-2002-1466

Disclosure Date: April 22, 2003 (last updated February 22, 2025)
CafeLog b2 Weblog Tool 2.06pre4, with allow_fopen_url enabled, allows remote attackers to execute arbitrary PHP code via the b2inc variable.
0
0
Attacker Value
Unknown

CVE-2002-1464

Disclosure Date: April 22, 2003 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in CafeLog b2 Weblog Tool allows remote attackers to insert arbitrary HTML or script via the GPC variable.
0
0