Read the docs

Miniblog Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Miniblog Project records in CISA KEV

No Miniblog Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Miniblog 1 record LOW

Records

1 record

TI-2019-07224 CVE-2019-9842 · GHSA-q26p-9rm7-92f4

madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary…

Priority LOW 36

madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in app_code/handlers/PostHandler.cs writes a decoded base64 s…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02163 Published 2019-06-14 No fix listed CWE-434
Open these records in search →