High severity7.5NVD Advisory· Published Jun 21, 2019· Updated Jun 17, 2026
CVE-2019-10718
CVE-2019-10718
Description
BlogEngine.NET 3.3.7.0 and earlier allows XML External Entity Blind Injection, related to pingback.axd and BlogEngine.Core/Web/HttpHandlers/PingbackHandler.cs.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- BlogEngine.NET/BlogEngine.NETdescription
- Range: <=3.3.7.0
- cpe:2.3:a:dotnetblogengine:blogengine.net:*:*:*:*:*:*:*:*Range: <=3.3.7.0
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/153364/BlogEngine.NET-3.3.6-3.3.7-XML-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.securitymetrics.com/blog/blogenginenet-xml-external-entity-attacksnvdExploitPatchThird Party Advisory
News mentions
0No linked articles in our index yet.