Blogengine vulnerabilities
We track 3 vulnerabilities in Blogengine products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 26, 2023.
3vulnerabilities
2critical
1high
0exploited
8.7average CVSS score
Latest Blogengine vulnerabilities
- 9.8 Critical severity
Blogengine.net: Unrestricted Upload of File with Dangerous Type
An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earlier allows remote attackers to execute remote code.
- 7.2 High severity
Blogengine.net: Improper Limitation of a Pathname to a Restricted Directory
An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file.
- 9.1 Critical severity
Blogengine.net: Improper Limitation of a Pathname to a Restricted Directory
BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request.