PatchTheCVEcafelog vulnerabilities
Recent CVEs affecting cafelog products. 5 tracked.
cafelog has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2007-04-26. Highest priority: CVE-2002-1466 (score 61/100).
- CVE-2007-2290 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote at
- CVE-2006-6830 HIGH 7.5 UPGRADE PHP remote file inclusion vulnerability in b2verifauth.php in b2 Blog 0.5 and earlier allows remote attackers
- CVE-2002-1466 HIGH 10.0 DOWNGRADE CafeLog b2 Weblog Tool 2.06pre4, with allow_fopen_url enabled, allows remote attackers to execute arbitrary PH
- CVE-2002-1465 HIGH 7.5 UPGRADE SQL injection vulnerability in CafeLog b2 Weblog Tool allows remote attackers to execute arbitrary SQL code vi
- CVE-2002-1464 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in CafeLog b2 Weblog Tool allows remote attackers to insert arbitrary
FAQ
How do I fix cafelog vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cafelog being exploited right now?
None of the tracked cafelog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cafelog CVE should I patch first?
CVE-2002-1466 currently ranks highest (61/100): CafeLog b2 Weblog Tool 2.06pre4, with allow_fopen_url enabled, allows remote attackers to execute arbitrary PH.