CVE-2023-33404

概要

参考情報

• hacip/CVE-2023-33404 · Exploit

blogengine.net のその他の脆弱性

• CVE-2023-33405中 6.1Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.
• CVE-2023-22858中 5.3An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs…
• CVE-2023-22857中 5.4A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security contex…
• CVE-2023-22856中 5.4A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security contex…
• CVE-2022-41417緊急 9.8BlogEngine.NET v3.3.8.0 allows an attacker to create any folder with "files" prefix under ~/App_Data/.