Known Vulnerabilities for products from Blogengine
Listed below are 14 of the newest known vulnerabilities associated with the vendor "Blogengine".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-33405 json | Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect. | 6.1 - MEDIUM | 2023-06-21 | 2023-06-28 |
| CVE-2023-33404 json | An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3... | 9.8 - CRITICAL | 2023-06-26 | 2023-07-05 |
| CVE-2023-22858 json | An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of un... | 5.3 - MEDIUM | 2023-03-06 | 2023-03-13 |
| CVE-2023-22857 json | A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the ... | 5.4 - MEDIUM | 2023-03-06 | 2023-03-10 |
| CVE-2023-22856 json | A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the ... | 5.4 - MEDIUM | 2023-03-06 | 2023-03-10 |
| CVE-2022-41418 json | An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attacke... | 7.2 - HIGH | 2022-12-19 | 2023-03-22 |
| CVE-2022-41417 json | BlogEngine.NET v3.3.8.0 allows an attacker to create any folder with "files" prefix under ~/App_Data/. | 9.8 - CRITICAL | 2023-01-18 | 2023-08-08 |
| CVE-2022-36600 json | BlogEngine v3.3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blogengine/api/pos... | 4.8 - MEDIUM | 2022-09-02 | 2022-09-02 |
| CVE-2022-28921 json | A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to r... | 6.5 - MEDIUM | 2022-05-18 | 2022-05-26 |
| CVE-2022-25591 json | BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete f... | 9.1 - CRITICAL | 2022-05-13 | 2022-05-23 |
| CVE-2019-10720 json | BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the theme cookie to the File Mana... | 8.8 - HIGH | 2019-06-21 | 2020-06-29 |
| CVE-2019-6714 json | An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in PostLis... | 9.8 - CRITICAL | 2019-03-21 | 2019-06-18 |
| CVE-2018-14485 json | BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd. | 9.8 - CRITICAL | 2019-05-07 | 2019-05-08 |
| CVE-2014-4736 json | SQL injection vulnerability in E2 before 2.4 (2845) allows remote attackers to execute arbitrary SQL commands via the note-id... | Not Provided | 2014-07-24 | 2026-05-06 |
Known software with vulnerabilities from Blogengine
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Blogengine | Blogengine.net | 3.3 |
| Application | Blogengine | E2 | 2.4 |