PT-2019-3865

Name of the Vulnerable Software and Affected Versions SIMATIC PCS 7 versions V8.0 and earlier SIMATIC PCS 7 version V8.1 through V8.1 with WinCC V7.3 Upd 18 SIMATIC PCS 7 version V8.2 through V8.2 SP1 with WinCC V7.4 SP1 Upd 10 SIMATIC PCS 7 version V9.0 through V9.0 SP2 with WinCC V7.4 SP1 Upd 1...

CVE-2019-9842

madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in appcode/handlers/PostHandler.cs writes a decoded base64 string to a file without validating the extension...

PT-2019-19890

Name of the Vulnerable Software and Affected Versions madskristensen MiniBlog through 2018-05-18 Description The issue allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL. This is because the SaveFilesToDisk function in app code/handlers/PostHandler.cs write...

Design/Logic Flaw

madskristensen Miniblog.Core through 2019-01-16 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in Controllers/BlogController.cs writes a decoded base64 string to a file without validating the extension...

CVE-2019-9845: Improper Input Validation

madskristensen Miniblog.Core through 2019-01-16 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in Controllers/BlogController.cs writes a decoded base64 string to a file without validating the extension...