Lucene search
+L

6 matches found

attackerkb
attackerkb
•added 2022/07/20 6:15 p.m.•9 views

CVE-2022-35569

Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted file...

4.8CVSS6.1AI score0.00501EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/07/20 5:45 p.m.•44 views

CVE-2022-35569

Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted file...

5.8AI score0.00501EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/07/20 12:00 a.m.•1 views

PT-2022-22906

Name of the Vulnerable Software and Affected Versions Blogifier version 3.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted file, exploiting an arbitrary file upload vulnerability at the /api/storage/upload/PostImage API endpoint. This enables attacke...

4.8CVSS0.00501EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/07/20 12:00 a.m.•15 views

Blogifier 跨站脚本漏洞

Blogifier is a lightweight open source blogging system written in ASP.NET Core. A security vulnerability exists in Blogifier version 3.0, which originates from a file upload vulnerability in the /api/storage/upload/PostImage page. An attacker can exploit this vulnerability to execute arbitrary we...

4.8CVSS5.6AI score0.00501EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/20 12:00 a.m.•5 views

CVE-2022-35569: Improper Neutralization of Input During Web Page Generation

Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted file...

4.8CVSS6.1AI score0.00501EPSS
SaveExploits1References2
Openbugbounty
Openbugbounty
•added 2017/06/07 4:50 a.m.•15 views

old.postimage.org XSS vulnerability

Vulnerable URL: https://old.postimage.org/?mode=";alert/OPENBUGBOUNTY/;a:function" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check old.postimage.org SSL...

6.3AI score
SaveExploits0
Rows per page
Query Builder