PT-2003-1203 · Cafelog · Cafelog B2 Weblog Tool

Published 2003-03-18 · Updated 2008-09-05 · CVE-2002-1466

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CafeLog b2 Weblog Tool version 2.06pre4

Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the b2inc variable when allow fopen url is enabled.

Recommendations For CafeLog b2 Weblog Tool version 2.06pre4, consider disabling the allow fopen url setting to prevent exploitation until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2002-1466

Affected Products

Cafelog B2 Weblog Tool

References · 3

• 🔥 http://online.securityfocus.com/archive/1/287228 · Exploit
• 🔥 http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0071.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1466 · Security Note