Blogengine.Net
Approved changes feed: RSS · Atom
cpe:2.3:a:blogengine:blogengine.net:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Blogengine (507e4660-052e-5720-8036-613d7e94b0eb) |
|---|---|
| Product | Blogengine.Net (0d9c6b38-4088-5073-b9e9-c5f23c55a27e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/blogengine/blogengine.net |
purl2cpe | 2026-06-01 10:14:53.743032 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-33405 |
vulnerable | 2026-06-08 06:06:22.383233 |
Details available
Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.
Published: 2023-06-21T00:00:00.000Z
Updated: 2024-12-06T17:11:39.560Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33404 |
vulnerable | 2026-06-08 06:06:22.382703 |
Details available
An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earlier allows remote attackers to execute remote code.
Published: 2023-06-26T00:00:00.000Z
Updated: 2024-12-03T17:18:13.843Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6714 |
vulnerable | 2026-06-08 05:14:13.007889 |
Details available
An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can cause unauthenticated users to load a PostView.ascx component from a potentially untrusted location on the local filesystem. This is especially dangerous if an authenticated user uploads a PostView.ascx file using the file manager utility, which is currently allowed. This results in remote code execution for an authenticated user.
Published: 2019-03-17T17:40:33.000Z
Updated: 2024-08-04T20:31:03.363Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10720 |
vulnerable | 2026-06-08 05:12:25.033075 |
Details available
BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the theme cookie to the File Manager. NOTE: this issue exists because of an incomplete fix for CVE-2019-6714.
Published: 2019-06-21T18:13:16.000Z
Updated: 2024-08-04T22:32:01.013Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.