4 matches found
CVE-2022-41418
An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...
CVE-2022-41418
An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...
CVE-2022-41418
An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...
CVE-2022-41418
The CVE-2022-41418 entry concerns BlogEngine.NET v3.3.8.0, where the vulnerability lies in the UploadController.cs under BlogEngine/BlogEngine.NET/AppCode/Api. Uploading a crafted PNG can lead to arbitrary code execution on the server. The issue is rooted in the file upload handling, enabling rem...