Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
blogengine blogengine.net 3.3.8.0 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-22858
An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs.
Blogengine Blogengine.net 3.3.8.0
NA
CVE-2023-22856
A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file.
Blogengine Blogengine.net 3.3.8.0
NA
CVE-2023-22857
A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an injection of a malicious payload into a blog post.
Blogengine Blogengine.net 3.3.8.0
6.4
CVSSv2
CVE-2022-25591
BlogEngine.NET v3.3.8.0 exists to contain an arbitrary file deletion vulnerability which allows malicious users to delete files within the web server root directory via a crafted HTTP request.
Blogengine Blogengine.net 3.3.8.0
NA
CVE-2022-36600
BlogEngine v3.3.8.0 exists to contain a cross-site scripting (XSS) vulnerability in the component /blogengine/api/posts. This vulnerability allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field.
Blogengine Blogengine.net 3.3.8.0
NA
CVE-2022-41417
BlogEngine.NET v3.3.8.0 allows an malicious user to create any folder with "files" prefix under ~/App_Data/.
Blogengine Blogengine.net 3.3.8.0
NA
CVE-2022-41418
An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows malicious users to execute arbitrary code via uploading a crafted PNG file.
Blogengine Blogengine.net 3.3.8.0
4.3
CVSSv2
CVE-2022-28921
A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated malicious users to read arbitrary files on the hosting web server.
Blogengine Blogengine.net 3.3.8.0
NA
CVE-2023-33405
Blogengine.net 3.3.8.0 and previous versions is vulnerable to Open Redirect.
Blogengine Blogengine.net
1 Github repository
NA
CVE-2023-33404
An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and previous versions allows remote malicious users to execute remote code.
Blogengine Blogengine.net
1 Github repository
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
cross-site request forgery
unauthorized
CVE-2024-33925
reflected XSS
CVE-2023-51580
CVE-2023-51579
CVE-2015-2051
CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started