Description
BlogEngine.NET 2.8.0.0 and earlier allows remote attackers to read usernames and password hashes via a request for the sioc.axd file.
References
- VU#553166 third-party-advisory
Unscored
CVE-2013-6953
EUVD-2013-6754GHSA-rh3h-42rr-fhm7
BlogEngine.NET 2.8.0.0 and earlier allows remote attackers to read usernames and password hashes via a request for the sioc.axd file.
Published Jan 2, 2014 · Updated Aug 6, 2024 · Assigned by certcc