Vulnerabilities > Miniblog Project

DATE	CVE	VULNERABILITY TITLE	RISK
2019-06-14	CVE-2019-9842	Unrestricted Upload of File with Dangerous Type vulnerability in Miniblog Project Miniblog madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in app_code/handlers/PostHandler.cs writes a decoded base64 string to a file without validating the extension. network low complexity miniblog-project CWE-434	7.2

Vulnerabilities > Miniblog Project {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Miniblog Project"}]}