CVE-2019-10720

Mô tả

Tham khảo

• packetstormsecurity.com/files/153348/BlogEngine.NET-3.3.6-3.3.7-Theme-Cookie-Directory-Traversal-Remote-Code-Execution.html · Exploit
• seclists.org/fulldisclosure/2019/Jun/26 · Mailing List
• securitymetrics.com/blog/BlogEngineNET-Directory-Traversal-Remote-Code-Execution-CVE-2019-10719-CVE-2019-10720 · Exploit

Lỗ hổng khác của blogengine.net

• CVE-2023-33404NGHIÊM TRỌNG 9.8An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earl…
• CVE-2023-33405TRUNG BÌNH 6.1Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.
• CVE-2023-22858TRUNG BÌNH 5.3An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs…
• CVE-2023-22857TRUNG BÌNH 5.4A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security contex…
• CVE-2023-22856TRUNG BÌNH 5.4A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security contex…