BlogEngine.NET

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

BlogEngine.NET records in CISA KEV

No BlogEngine.NET vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Blogengine.net 13 records HIGH E2 1 record LOW

Records

1 record in E2 · all components

TI-2014-03895 CVE-2014-4736 · GHSA-vr78-cpqr-qr3p

SQL injection vulnerability in E2 before 2.4 (2845) allows remote attackers to execute…

LOW 37

SQL injection vulnerability in E2 before 2.4 (2845) allows remote attackers to execute arbitrary SQL commands via the note-id parameter to @actions/comment-process.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02348 Published 2014-07-24 No fix listed CWE-89

Open these records in search →

Critical	5
High	5
Medium	4
Low	0
No CVSS	0