182 matches found
CVE-2022-41418
An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...
CVE-2022-25591
BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request...
CVE-2022-28921
A Cross-Site Request Forgery CSRF vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server...
CVE-2019-10717
BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter...
CVE-2019-10721
BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs, login.aspx, and register.aspx...
CVE-2019-10719
BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution because file creation is mishandled, related to /api/upload and BlogEngine.NET/AppCode/Api/UploadController.cs. NOTE: this issue exists because of an incomplete fix for CVE-2019-6714...
CVE-2023-33404
An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earlier allows remote attackers to execute remote code...
CVE-2023-33404
An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earlier allows remote attackers to execute remote code...
PT-2023-24332 · Unknown · Blogengine.Net
Name of the Vulnerable Software and Affected Versions: BlogEngine.Net versions 3.3.8.0 and earlier Description: The issue is related to an Unrestricted Upload vulnerability due to insufficient validation on the UploadControlled.cs file. This allows remote attackers to execute remote code...
CVE-2023-33404: Unrestricted Upload of File with Dangerous Type
An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earlier allows remote attackers to execute remote code...
CVE-2023-33404
An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earlier allows remote attackers to execute remote code...
CVE-2023-33404
An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earlier allows remote attackers to execute remote code...
CVE-2023-33404
CVE-2023-33404 affects BlogEngine.Net versions 3.3.8.0 and earlier, due to an Unrestricted Upload vulnerability caused by insufficient validation in the UploadControlled.cs file. This leads to remote code execution by an attacker with network access and no user interaction. The connected sources ...
CVE-2023-33404
An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earlier allows remote attackers to execute remote code...
CVE-2023-33405
Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect...
CVE-2023-33405
Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect...
Open redirect
Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect...
CVE-2023-33405
Blogengine.net v3.3.8.0 and earlier are affected by an Open Redirect vulnerability. The issue arises from an open redirect vector via the years parameter, allowing unauthenticated attackers to redirect users to malicious sites (phishing). Remediation: update to the latest Blogengine.net CMS versi...