Security Advisory

CVE-2019-10720

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-06-21 18:13:16
Last updated 2024-08-04 22:32:01
Assigner mitre
State PUBLISHED

Description

BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the theme cookie to the File Manager. NOTE: this issue exists because of an incomplete fix for CVE-2019-6714.