Blogengine.net vulnerabilities
3 known vulnerabilities in Blogengine.net from Blogengine. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Blogengine.net: Unrestricted Upload of File with Dangerous Type
An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earlier allows remote attackers to execute remote code.
- 7.2 High severity
Blogengine.net: Improper Limitation of a Pathname to a Restricted Directory
An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file.
- 9.1 Critical severity
Blogengine.net: Improper Limitation of a Pathname to a Restricted Directory
BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request.