Skip to content
Blogengine Blogengine.net vulnerabilities
-
blogengine blogengine.net
An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file,...
CVE-2023-33404
Public exploit
EPSS 25.8%
9.8 Critical
-
blogengine blogengine.net
Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.
CVE-2023-33405
Public exploit
EPSS 31.3%
6.1 Medium
-
blogengine blogengine.net
Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
CVE-2023-22858
5.3 Medium
-
blogengine blogengine.net
Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
CVE-2023-22857
8.5 High
-
blogengine blogengine.net
Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
CVE-2023-22856
8.5 High
-
blogengine blogengine.net
BlogEngine.NET v3.3.8.0 allows an attacker to create any folder with "files" prefix under ~...
CVE-2022-41417
9.8 Critical
-
blogengine blogengine.net
An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine...
CVE-2022-41418
7.2 High
-
blogengine blogengine.net
BlogEngine v3.3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the...
CVE-2022-36600
4.8 Medium
-
blogengine blogengine.net
A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows...
CVE-2022-28921
6.5 Medium
-
blogengine blogengine.net
BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which...
CVE-2022-25591
9.1 Critical
-
blogengine blogengine.net
BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the...
CVE-2019-10720
8.8 High
-
blogengine blogengine.net
BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.
CVE-2018-14485
Public exploit
EPSS 16.3%
9.8 Critical
-
blogengine blogengine.net
An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File...
CVE-2019-6714
Public exploit
EPSS 31.7%
9.8 Critical