PT-2019-19890

Name of the Vulnerable Software and Affected Versions madskristensen MiniBlog through 2018-05-18 Description The issue allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL. This is because the SaveFilesToDisk function in app code/handlers/PostHandler.cs write...

CVE-2019-9845: Improper Input Validation

madskristensen Miniblog.Core through 2019-01-16 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in Controllers/BlogController.cs writes a decoded base64 string to a file without validating the extension...