Cafelog

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Cafelog records in CISA KEV

No Cafelog vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

B2 4 records MEDIUM B2 Blog 1 record LOW

Records

5 records

TI-2002-01388 CVE-2002-1466 · GHSA-v573-78hv-qjj4

CafeLog b2 Weblog Tool 2.06pre4, with allow_fopen_url enabled, allows remote attackers to…

MEDIUM 48

CafeLog b2 Weblog Tool 2.06pre4, with allow_fopen_url enabled, allows remote attackers to execute arbitrary PHP code via the b2inc variable.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02673 Published 2003-03-18 No fix listed

TI-2007-02208 CVE-2007-2290 · GHSA-hjff-7g2c-88cw

Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool…

LOW 39

Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to (1) b2archives.php, (2) b2categories…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03384 Published 2007-04-26 No fix listed

TI-2006-06573 CVE-2006-6830 · GHSA-v3h5-q2rr-5v88

PHP remote file inclusion vulnerability in b2verifauth.php in b2 Blog 0.5 and earlier…

LOW 37

PHP remote file inclusion vulnerability in b2verifauth.php in b2 Blog 0.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the index parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02425 Published 2007-01-01 No fix listed

TI-2002-01387 CVE-2002-1465 · GHSA-jrx5-x53p-7cg9

SQL injection vulnerability in CafeLog b2 Weblog Tool allows remote attackers to execute…

LOW 36

SQL injection vulnerability in CafeLog b2 Weblog Tool allows remote attackers to execute arbitrary SQL code via the tablehosts variable.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0138 Published 2003-03-18 No fix listed

TI-2002-01386 CVE-2002-1464 · GHSA-pj53-rmv6-jh9j

Cross-site scripting (XSS) vulnerability in CafeLog b2 Weblog Tool allows remote…

LOW 33

Cross-site scripting (XSS) vulnerability in CafeLog b2 Weblog Tool allows remote attackers to insert arbitrary HTML or script via the GPC variable.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01507 Published 2003-03-18 No fix listed

Open these records in search →

Critical	1
High	3
Medium	1
Low	0
No CVSS	0