CVE-2002-0734
b2edit.showposts.php in B2 2.0.6pre2 and earlier does not properly load the b2config.php file in some configurations, which allows remote attackers to execute arbitrary PHP code via a URL that sets the $b2inc variable to point to a malicious program stored on a remote server.
Scoring
- CVSS base score
- 0.19
- EPSS probability
- 4.83%
- Published
- 2003-04-02
- Last modified
- 2026-03-16
Affected products
- n/a n/a