Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in app_code/handlers/PostHandler.cs writes a decoded base64 string to a file without validating the extension.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
madskristensen MiniBlog 代码问题漏洞
Vulnerability Description
madskristensen MiniBlog是一款基于HTML5和ASP.NET的博客引擎。 madskristensen MiniBlog 2018-05-18及之前版本中存在安全漏洞，该漏洞源于app_code/handlers/PostHandler.cs文件的SaveFilesToDisk没有验证扩展便将base64编码的字符串写入到文件中。远程攻击者可执行任意的ASPX代码。
CVSS Information
N/A
Vulnerability Type
N/A