PT-2003-1203 · Cafelog · Cafelog B2 Weblog Tool

Publicado 2003-03-18 · Atualizado 2008-09-05 · CVE-2002-1466

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CafeLog b2 Weblog Tool version 2.06pre4

Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the b2inc variable when allow fopen url is enabled.

Recommendations For CafeLog b2 Weblog Tool version 2.06pre4, consider disabling the allow fopen url setting to prevent exploitation until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2002-1466

Produtos afetados

Cafelog B2 Weblog Tool

Referências · 3

• 🔥 http://online.securityfocus.com/archive/1/287228 · Exploit
• 🔥 http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0071.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1466 · Nota de Segurança