EUVD-2002-1447

Malware in sbrugna...

EUVD-2002-1448

Malware in sbrugna...

CafeLog B2 0.6.1 Weblog and News Publishing Tool b2archives.php b2inc Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the...

CafeLog B2 0.6.1 Weblog and News Publishing Tool b2categories.php b2inc Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the...

CafeLog B2 0.6.1 Weblog and News Publishing Tool b2mail.php b2inc Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the...

Cafelog b2 0.6 - Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7738/info A remote file include vulnerability has been reported for Cafelog. Due to insufficient sanitization of some user-supplied variables by the 'blogger-2-b2.php' and 'gm-2-b2.php' scripts, it is possible for a remot...

CafeLog B2 0.6.1 Weblog and News Publishing Tool - b2archives.php?b2inc Remote File Inclusion

CafeLog B2 0.6.1 Weblog and News Publishing Tool - b2archives.php?b2inc Remote File Inclusion source: https://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may...

CafeLog B2 0.6.1 Weblog and News Publishing Tool - 'b2archives.php?b2inc' Remote File Inclusion

source: https://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are...

CafeLog B2 0.6.1 Weblog and News Publishing Tool - b2mail.php?b2inc Remote File Inclusion

CafeLog B2 0.6.1 Weblog and News Publishing Tool - b2mail.php?b2inc Remote File Inclusion source: https://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may all...

CafeLog B2 0.6.1 Weblog and News Publishing Tool - b2categories.php?b2inc Remote File Inclusion

CafeLog B2 0.6.1 Weblog and News Publishing Tool - b2categories.php?b2inc Remote File Inclusion source: https://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues m...

CafeLog B2 0.6.1 Weblog and News Publishing Tool - 'b2mail.php?b2inc' Remote File Inclusion

source: https://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are...

cafelog.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vendor: Cafelog Product: WordPress formerly b2 http://www.wordpress.org/ Vulnerable Versions: CVS versions before October 1, 2003 Vulnerability affects code inherited from b2, so all versions of wordpress released before CVS fix are affected and many...

[Full-Disclosure] Cafelog WordPress / b2 SQL injection vulnerabilities discovered and fixed in CVS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vendor: Cafelog Product: WordPress formerly b2 http://www.wordpress.org/ Vulnerable Versions: CVS versions before October 1, 2003 Vulnerability affects code inherited from b2, so all versions of wordpress released before CVS fix are affected and many...

b2 cafelog: remote command execution, sql injection and another flaw.

Products: b2 cafelog 0.6.1 with ljupdate b2 cafelog 0.6.2 and prior Author: FraMe frame at kernelpanik.org URL: http://www.kernelpanik.org CONTENTS 1. Overview 2. Description. 3. Details. 4. Vendor Response 1. Overview. b2 is a news/weblog tool written in php. b2 uses MySQL as backend system. 2...

b2cafelog.txt

Products: b2 cafelog 0.6.1 http://cafelog.com/ Date: 29 May 2003 Author: pokleyzz Contributors: skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: b2 cafelog 0.6.1 remote command execution. Description =========== b2 cafel...

b2 cafelog 0.6.1 remote command execution.

Products: b2 cafelog 0.6.1 http://cafelog.com/ Date: 29 May 2003 Author: pokleyzz pokleyzzatscan-associates.net Contributors: skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: b2 cafelog 0.6.1 remote command execution...

Cafelog b2 0.6 - Remote File Inclusion

source: https://www.securityfocus.com/bid/7738/info A remote file include vulnerability has been reported for Cafelog. Due to insufficient sanitization of some user-supplied variables by the 'blogger-2-b2.php' and 'gm-2-b2.php' scripts, it is possible for a remote attacker to include a malicious...

Cafelog b2 0.6 - Remote File Inclusion

Cafelog b2 0.6 - Remote File Inclusion source: https://www.securityfocus.com/bid/7738/info A remote file include vulnerability has been reported for Cafelog. Due to insufficient sanitization of some user-supplied variables by the 'blogger-2-b2.php' and 'gm-2-b2.php' scripts, it is possible for a...

CafeLog B2 Multiple Script Remote File Inclusion

The remote web server is running CafeLog, a blogging application written in PHP. The 'blogger-2-b2.php' and 'gm-2-b2.php' scripts are affected by a flaw that could allow an attacker to inject code. An attacker could exploit this to execute arbitrary code on the remote host subject to the privileg...

CVE-2002-1465

SQL injection vulnerability in CafeLog b2 Weblog Tool allows remote attackers to execute arbitrary SQL code via the tablehosts variable...