CVE-2019-9842: Unrestricted Upload of File with Dangerous Type

madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in appcode/handlers/PostHandler.cs writes a decoded base64 string to a file without validating the extension...

PT-2019-19890

Name of the Vulnerable Software and Affected Versions madskristensen MiniBlog through 2018-05-18 Description The issue allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL. This is because the SaveFilesToDisk function in app code/handlers/PostHandler.cs write...