BlogEngine.NET 3.3.7.0 - Local File Inclusion Detection

BlogEngine.NET 3.3.7.0 allows /api/filemanager local file inclusion via the path parameter !/usr/bin/env python3 -- coding: utf-8 -- """BlogEngine.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

CVE-2019-10717

BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter...

PT-2019-12007

Name of the Vulnerable Software and Affected Versions BlogEngine.NET version 3.3.7.0 Description The issue allows for Directory Traversal via the path parameter in the "/api/filemanager" API endpoint. Recommendations For BlogEngine.NET version 3.3.7.0, avoid using the path parameter in the...