Vulnerability in Cafelog B2

CVE-2002-1466

CafeLog b2 Weblog Tool 2.06pre4, with allow_fopen_url enabled, allows remote attackers to execute arbitrary PHP code via the b2inc variable.

EPSS: 0.027 (84.2th percentile) — read the EPSS interpretation.

Affected products

  • Cafelog B2 — versions 2.06pre4
  • N/a — versions n/a

References

  • cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_VULNWATCH, Exploit, Patch)
  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)