182 matches found
CVE-2022-28921
A Cross-Site Request Forgery CSRF vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server...
CVE-2022-28921
A Cross-Site Request Forgery CSRF vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server...
CVE-2022-28921
CVE-2022-28921 affects BlogEngine.Net v3.3.8.0. The vulnerability is a Cross-Site Request Forgery (CSRF) that allows unauthenticated attackers to read arbitrary files on the hosting web server. The sources consistently describe the issue as CSRF with file-read impact, but a concrete root-cause an...
CVE-2022-28921: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server...
CVE-2022-25591
BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request...
CVE-2022-25591
BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request...
Arbitrary file deletion
BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request...
CVE-2022-25591
BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request...
CVE-2022-25591
BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request...
CVE-2022-25591
BlogEngine.NET v3.3.8.0 is affected by an arbitrary file deletion vulnerability that allows an attacker to delete files in the web server root via a crafted HTTP request. The description confirms the affected software and the specific destructive action, but the available documents do not specify...
BlogEngine.NET 路径遍历漏洞
BlogEngine is an open source ASP.NET blog system . The system supports Ajax comments, custom themes and more. A security vulnerability exists in BlogEngine.NET v3.3.8.0, which can be exploited by an attacker to delete files in the root directory of the web server via a crafted HTTP request...
CVE-2022-25591: Improper Limitation of a Pathname to a Restricted Directory
BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request...
CVE-2019-10721
BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs, login.aspx, and register.aspx...
CVE-2019-10721
BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs, login.aspx, and register.aspx...
CVE-2019-10717
BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter...
CVE-2019-10717
BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter...
Design/Logic Flaw
BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs, login.aspx, and register.aspx...
Directory traversal
BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter...
CVE-2019-10717
BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter...
CVE-2019-10717
CVE-2019-10717 affects BlogEngine.NET 3.3.7.0 via /api/filemanager?path=, allowing Directory Traversal / Local File Inclusion. The Nuclei template confirms /api/filemanager local file inclusion and describes impact: read sensitive files and potentially broader compromise. Exploitation details in ...