b2 has an SQL injection vulnerability. Patch your blog.header.php as soon as possible.

More info here:

cafelog.com/index.php

tidakada.com/board/viewtopic.php

patch