Blogengine vulnerabilities

Products

• Blogengine.net 13

Newest

• blogengine blogengine.net An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file,... CVE-2023-33404 Public exploit EPSS 25.8% 9.8 CriticalJune 26, 2023
• blogengine blogengine.net Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect. CVE-2023-33405 Public exploit EPSS 31.3% 6.1 MediumJune 21, 2023
• blogengine blogengine.net Stored cross-site scripting in BlogEngine.NET version 3.3.8.0 CVE-2023-22858 5.3 MediumMarch 6, 2023
• blogengine blogengine.net Stored cross-site scripting in BlogEngine.NET version 3.3.8.0 CVE-2023-22857 8.5 HighMarch 6, 2023
• blogengine blogengine.net Stored cross-site scripting in BlogEngine.NET version 3.3.8.0 CVE-2023-22856 8.5 HighMarch 6, 2023
• blogengine blogengine.net BlogEngine.NET v3.3.8.0 allows an attacker to create any folder with "files" prefix under ~... CVE-2022-41417 9.8 CriticalJanuary 18, 2023
• blogengine blogengine.net An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine... CVE-2022-41418 7.2 HighDecember 19, 2022
• blogengine blogengine.net BlogEngine v3.3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the... CVE-2022-36600 4.8 MediumSeptember 2, 2022
• blogengine blogengine.net A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows... CVE-2022-28921 6.5 MediumMay 18, 2022
• blogengine blogengine.net BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which... CVE-2022-25591 9.1 CriticalMay 13, 2022
• blogengine blogengine.net BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the... CVE-2019-10720 8.8 HighJune 21, 2019
• blogengine blogengine.net BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd. CVE-2018-14485 Public exploit EPSS 16.3% 9.8 CriticalMay 7, 2019
• blogengine blogengine.net An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File... CVE-2019-6714 Public exploit EPSS 31.7% 9.8 CriticalMarch 17, 2019
• blogengine e2 SQL injection vulnerability in E2 before 2.4 (2845) allows remote attackers to execute arbitrary... CVE-2014-4736 Public exploit 7.5 HighJuly 24, 2014