Vulnerabilities > CVE-2018-14485 - XXE vulnerability in Blogengine Blogengine.Net 3.3
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Common Weakness Enumeration (CWE)
Exploit-Db
| id | EDB-ID:46106 |
| last seen | 2019-01-09 |
| modified | 2019-01-09 |
| published | 2019-01-09 |
| reporter | Exploit-DB |
| source | https://www.exploit-db.com/download/46106 |
| title | BlogEngine 3.3 - XML External Entity Injection |
Packetstorm
| data source | https://packetstormsecurity.com/files/download/151063/NS-18-045.txt |
| id | PACKETSTORM:151063 |
| last seen | 2019-01-09 |
| published | 2019-01-09 |
| reporter | Mustafa Yalcin |
| source | https://packetstormsecurity.com/files/151063/BlogEngine-3.3-XML-External-Entity-Injection.html |
| title | BlogEngine 3.3 XML External Entity Injection |
References
- http://packetstormsecurity.com/files/151063/BlogEngine-3.3-XML-External-Entity-Injection.html
- http://packetstormsecurity.com/files/151063/BlogEngine-3.3-XML-External-Entity-Injection.html
- https://github.com/rxtur/BlogEngine.NET/commits/master
- https://github.com/rxtur/BlogEngine.NET/commits/master
- https://www.exploit-db.com/exploits/46106/
- https://www.exploit-db.com/exploits/46106/