CVE-2018-14485

Description

References

• packetstormsecurity.com/files/151063/BlogEngine-3.3-XML-External-Entity-Injection.html · Third Party Advisory
• rxtur/BlogEngine.NET · Third Party Advisory
• exploit-db.com/exploits/46106 · Third Party Advisory

blogengine.net의 다른 취약점

• CVE-2023-33404심각 9.8An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earl…
• CVE-2023-33405보통 6.1Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.
• CVE-2023-22858보통 5.3An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs…
• CVE-2023-22857보통 5.4A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security contex…
• CVE-2023-22856보통 5.4A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security contex…