High severity8.8NVD Advisory· Published Jun 21, 2019· Updated Jun 17, 2026
CVE-2019-10719
CVE-2019-10719
Description
BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution because file creation is mishandled, related to /api/upload and BlogEngine.NET/AppCode/Api/UploadController.cs. NOTE: this issue exists because of an incomplete fix for CVE-2019-6714.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- BlogEngine.NET/BlogEngine.NETdescription
- cpe:2.3:a:dotnetblogengine:blogengine.net:*:*:*:*:*:*:*:*Range: <=3.3.7.0
- Range: <=3.3.7.0
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/153347/BlogEngine.NET-3.3.6-3.3.7-dirPath-Directory-Traversal-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.securitymetrics.com/blog/BlogEngineNET-Directory-Traversal-Remote-Code-Execution-CVE-2019-10719-CVE-2019-10720nvdExploitPatchThird Party Advisory
- seclists.org/fulldisclosure/2019/Jun/26nvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.