BlogEngine.NET 3.3.7.0 and earlier allows XML External Entity Blind Injection, related to pingback.axd and BlogEngine.Core/Web/HttpHandlers/PingbackHandler.cs...
7.5CVSS6.8AI score0.02657EPSS
SaveExploits5References2
NVD•added 2019/06/21 7:15 p.m.•12 views
CVE-2019-10718
BlogEngine.NET 3.3.7.0 and earlier allows XML External Entity Blind Injection, related to pingback.axd and BlogEngine.Core/Web/HttpHandlers/PingbackHandler.cs...