PatchTheCVEb2 vulnerabilities and fixes
Recent CVEs affecting b2, with upgrade or downgrade steps. 5 tracked.
b2 has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-04-26. Highest priority: CVE-2002-1466 (score 61/100).
- CVE-2007-2290 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote at
- CVE-2002-1466 HIGH 10.0 DOWNGRADE CafeLog b2 Weblog Tool 2.06pre4, with allow_fopen_url enabled, allows remote attackers to execute arbitrary PH
- CVE-2002-1465 HIGH 7.5 UPGRADE SQL injection vulnerability in CafeLog b2 Weblog Tool allows remote attackers to execute arbitrary SQL code vi
- CVE-2002-1464 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in CafeLog b2 Weblog Tool allows remote attackers to insert arbitrary
- CVE-2002-0734 HIGH 7.5 DOWNGRADE b2edit.showposts.php in B2 2.0.6pre2 and earlier does not properly load the b2config.php file in some configur
FAQ
How do I fix b2 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is b2 being exploited right now?
None of the tracked b2 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which b2 CVE should I patch first?
CVE-2002-1466 currently ranks highest (61/100): CafeLog b2 Weblog Tool 2.06pre4, with allow_fopen_url enabled, allows remote attackers to execute arbitrary PH.