Export limit exceeded: 425897 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2006-6830

PHP remote file inclusion vulnerability in b2verifauth.php in b2 Blog 0.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the index parameter.

CVSS 2.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Cafelog
Products
B2 Blog
CVE-2007-2290

Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to (1) b2archives.php, (2) b2categories.php, or (3) b2mail.php. NOTE: this may overlap CVE-2002-1466.

CVSS 2.0 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Cafelog
Products
B2
CVE-2002-1464

Cross-site scripting (XSS) vulnerability in CafeLog b2 Weblog Tool allows remote attackers to insert arbitrary HTML or script via the GPC variable.

CVSS 2.0 · 6.8 Medium EPSS 1.5% KEV · Not listed
Vendors
Cafelog
Products
B2
CVE-2002-1465

SQL injection vulnerability in CafeLog b2 Weblog Tool allows remote attackers to execute arbitrary SQL code via the tablehosts variable.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Cafelog
Products
B2
CVE-2002-1466

CafeLog b2 Weblog Tool 2.06pre4, with allow_fopen_url enabled, allows remote attackers to execute arbitrary PHP code via the b2inc variable.

CVSS 2.0 · 10.0 Critical EPSS 2.7% KEV · Not listed
Vendors
Cafelog
Products
B2